608 matches found
SUSE CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...
SUSE CVE-2011-0712
Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to 1 the sndusbcaiaqaudioinit...
SUSE CVE-2011-2518
The tomoyomountacl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kernpath function with arguments taken directly from a mount system call, which allows local users to cause a denial of service OOPS or possibly have unspecified other impact via a NULL value for...
SUSE CVE-2011-2724
The checkmtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...
SUSE CVE-2012-5963
Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long UDN aka uuid field within a string tha...
GSD-2023-1001635 mtd: Fix device name leak when register device failed in add_mtd_device()
mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...
GSD-2023-1001478 mtd: Fix device name leak when register device failed in add_mtd_device()
mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
GSD-2023-1000786 mtd: Fix device name leak when register device failed in add_mtd_device()
mtd: Fix device name leak when register device failed in addmtddevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
PT-2023-33863 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in Linux Kernel...
PT-2025-54036
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to HID devices and uclogic handling. Specifically, an incorrect device reference for devm allocation of the input device name could lead to a...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6 version V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the devName parameter in the formSetDeviceName function...
PT-2022-27589 · Tenda · Tenda Ac6V1.0
Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the devName parameter in the formSetDeviceName function. This issue can be exploited, potentially allowing unauthorized access or control...
Tenda AC18 formSetDeviceName function buffer overflow vulnerability
Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability that stems from the formSetDeviceName function that allows an attacker to implement a buffer...
CVE-2022-44158
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via setdevicename...
Tenda AC21 缓冲区错误漏洞
The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which is caused by the setdevicename function not checking the length and size of the input data, and can be exploited to cause a denial of service...
PT-2022-27126 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can be triggered via the set device name function. This allows for potential exploitation. Recommendations: For Tenda AC21 version 16.03.08.15, conside...
kernel: ptp: Fix possible memory leak in ptp_clock_register()
In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptpclockregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 size 8: comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 age 13.188s hex...
kernel: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
A flaw was found in the smc module in the Linux kernel. A NULL pointer dereference can be triggered due to a missing check before calling the devname function, resulting in a denial of service...
Tenda AC21 缓冲区错误漏洞
Tenda AC21 is a wireless router from Tenda China. Tenda AC21 version V16.03.08.15 contains a buffer overflow vulnerability, which originates from the lack of length checking of the formSetDeviceName function in /bin/httpd for input data, and can be exploited to cause httpd to restart via the...
