22 matches found
Inject CAN Message
Injects CAN messages into the bus attack/exploitation !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Injector - Injects CAN messages into the bus Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo, printsuccess, printerror,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988989)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988989 advisory. In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a stat...
EUVD-2022-54957
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CentOS 9 : kernel-5.14.0-573.el9
"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-573.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sgrelease Fix a...
Linux Distros Unpatched Vulnerability : CVE-2022-49269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a...
SUSE CVE-2022-49269
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CVE-2022-49269
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CVE-2022-49269 can: isotp: sanitize CAN ID checks in isotp_bind()
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CVE-2022-49269
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CVE-2022-49269 can: isotp: sanitize CAN ID checks in isotp_bind()
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
CVE-2022-49269
The CVE-2022-49269 issue affects the Linux kernel CAN subsystem: isotp_bind() incorrectly validates CAN IDs, allowing a state machine path that can be reached with non-standard IDs (ex: 0x6000001 and 0xC28001) that map to 11-bit IDs 0x001. The fix sanitizes SFF/EFF CAN ID values before address ch...
CVE-2022-49269: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotpbind Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted o...
Code injection
The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...
GSD-2022-1002127 can: isotp: sanitize CAN ID checks in isotp_bind()
can: isotp: sanitize CAN ID checks in isotpbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...
GSD-2022-1001909 can: isotp: sanitize CAN ID checks in isotp_bind()
can: isotp: sanitize CAN ID checks in isotpbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...
GSD-2022-1001605 can: isotp: sanitize CAN ID checks in isotp_bind()
can: isotp: sanitize CAN ID checks in isotpbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...
GSD-2022-1001299 can: isotp: sanitize CAN ID checks in isotp_bind()
can: isotp: sanitize CAN ID checks in isotpbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...
PT-2022-30400
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the isotp bind function, where CAN ID checks are not properly sanitized. This could potentially lead to security vulnerabilities, although the actual impact and attac...
PT-2022-29572
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.17.1 Description The issue is related to the isotp bind function, where CAN ID checks are not properly sanitized. This could potentially lead to security vulnerabilities, although the actual impact and...
PT-2025-8197
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the isotp bind function. The issue arose when Syzbot created an environment that led to a state machine status that cann...