101 matches found
SUSE CVE-2007-3409
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...
SUSE CVE-2012-3409
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...
CVE-2022-3409
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipartparser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected...
CVE-2022-3409 Unauthenticated out of bounds stack write in bmcweb
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipartparser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected...
CVE-2022-3409 Unauthenticated out of bounds stack write in bmcweb
A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was identified during mitigation for CVE-2022-2809. When fuzzing the multipartparser code using AFL++ with address sanitizer enabled to find smallest memory corruptions possible. It detected...
CVE-2022-3409
CVE-2022-3409 concerns the bmcweb component of the OpenBMC project. The issue arises in the multipart_parser when handling unclosed HTTP headers: passing a long multipart form header without a colon can overwrite one byte on the heap, enabling repeated exploitation to cause a denial of service. T...
SUSE: Security Advisory (SUSE-SU-2022:3594-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the microprogrammed Wi-Fi camera software of Rubetek RV-3406, RV-3409, and RV-3411 lies in the lack of protection for transmitted data, allowing intruders to intercept and modify video data from the cameras.
The vulnerability of the Microprogrammed Wi-Fi cameras Rubetek RV-3406, RV-3409, and RV-3411 lies in the lack of protection for transmitted data. Exploiting this vulnerability could allow a remote attacker to intercept and modify video data from the cameras...
The vulnerability of the Telnet service of the Wi-Fi camera software developed by Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain full control over the device.
The vulnerability of the telnet service provided by the microprogrammed Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, is related to the use of pre-installed registration data. Exploiting this vulnerability can allow a remote attacker to gain full control over the device...
openSUSE: Security Advisory for qemu (openSUSE-SU-2021:1942-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-2046)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:1942-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3409 affecting package qemu-kvm 4.2.0-48
CVE-2021-3409 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2021-1735)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2021-1763)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3409
creationtimestamp| type| source ---|---|--- 2021-03-23 23:38:32+00:00| seen| https://t.me/cibsecurity/25344 2022-07-04 20:59:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2976 2023-11-29 05:12:44+00:00| seen| https://t.me/arpsyndicate/669 2026-09-01 17:00:57+00:00|...
DEBIAN-CVE-2021-3409
The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resultin...
CVE-2021-3409
CVE-2021-3409 affects QEMU up to 5.2.0 and stems from an ineffective patch for CVE-2020-17380/CVE-2020-25085, leading to a heap/buffer overflow in the SDHCI controller emulation. Astra Linux reports these issues as a heap-based overflow triggered by a mis-handled write in the SDHC_BLKSIZE path of...
CVE-2021-3409
The patch for CVE-2020-17380 and CVE-2020-25085, both involving a heap buffer overflow in the SDHCI controller emulation code of QEMU, was found to be incomplete. A malicious privileged guest could reproduce the same issues with specially crafted input, inducing a bogus transfer and subsequent...
Design/Logic Flaw
The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings...