nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

Race condition

In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause high load on RPD which in turn may lead to routing protocol flaps. If a system...

UVI-2021-1000621 net: fec: fix the potential memory leak in fec_enet_init()

net: fec: fix the potential memory leak in fecenetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000621 net: fec: fix the potential memory leak in fec_enet_init()

net: fec: fix the potential memory leak in fecenetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000582 net: fec: fix the potential memory leak in fec_enet_init()

net: fec: fix the potential memory leak in fecenetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000546 net: fec: fix the potential memory leak in fec_enet_init()

net: fec: fix the potential memory leak in fecenetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2024-11199 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak in the fec enet init function has been resolved. If the memory allocated for cbd base fails, it should free the memory allocated for the queues to prevent a...

Logic flaws in the Shenzhen FEC Chopsticks Cloud Building System.

Shenzhen Chopsticks Cloud Information Technology Co., Ltd formerly Shenzhen Fortune E-commerce Co., Ltd is an Internet+ consulting, technology solution and cloud platform operating company in China. A logic flaw vulnerability exists in the Shenzhen FEC Chopsticks Cloud website building system,...

A Push to Protect Campaigns from Hackers Hits an FEC Roadblock

The FEC may prevent an anti-phishing firm providing its services to campaigns for free or cheap...

WebRTC - FEC Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc There is an out-of-bounds read in FEC processing in WebRTC. If a very short RTP packet is received, FEC will assume the packet is longer and process data outside of the allocated buffer. This bug causes the following ASAN crash: ==109993==ERROR:...

WebRTC - FEC Out-of-Bounds Read

There is an out-of-bounds read in FEC processing in WebRTC. If a very short RTP packet is received, FEC will assume the packet is longer and process data outside of the allocated buffer. This bug causes the following ASAN crash: ==109993==ERROR: AddressSanitizer: heap-buffer-overflow on address...

WebRTC - FEC Out-of-Bounds Read

WebRTC - FEC Out-of-Bounds Read There is an out-of-bounds read in FEC processing in WebRTC. If a very short RTP packet is received, FEC will assume the packet is longer and process data outside of the allocated buffer. This bug causes the following ASAN crash: ==109993==ERROR: AddressSanitizer:...

WebRTC - FEC Processing Overflow Exploit

Exploit for multiple platform in category dos / poc There are several calls to memcpy that can overflow the destination buffer in webrtc::UlpfecReceiverImpl::AddReceivedRedPacket. The method takes a parameter incomingrtppacket, which is an RTP packet with a mac length that is defined by the...

WebRTC - FEC Processing Overflow

WebRTC - FEC Processing Overflow There are several calls to memcpy that can overflow the destination buffer in webrtc::UlpfecReceiverImpl::AddReceivedRedPacket. The method takes a parameter incomingrtppacket, which is an RTP packet with a mac length that is defined by the transport 2048 bytes for...

WebRTC - FEC Processing Overflow

There are several calls to memcpy that can overflow the destination buffer in webrtc::UlpfecReceiverImpl::AddReceivedRedPacket. The method takes a parameter incomingrtppacket, which is an RTP packet with a mac length that is defined by the transport 2048 bytes for DTLS in Chrome. This packet is...

Open Source LoRa CSS PHY Implementation: gr-lora

Open Source LoRa CSS PHY Implementation LoRa is a wireless LPWAN PHY that is developed and maintained by Semtech. It is designed to provide long range, low data rate connectivity to IoT-focused devices. A reasonable analogy is that LoRa is like cellular data service, but optimized for embedded...

UBUNTU-CVE-2016-9776

QEMU aka Quick Emulator built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcffecreceive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading t...

QEMU '/hw/net/mcf_fec.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the /hw/net/mcffec.c file in QEMU. An attacker can exploit this vulnerability to cause a denial of...

Qemu imx_fec_do_tx() function infinite loop vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An infinite loop vulnerability exists in the imxfecdotx function in QEMU, which can be exploited by an attacker with privileges to launch a DoS attack to crash QEMU...

DEBIAN-CVE-2016-7908

The mcffecdotx function in hw/net/mcffec.c in QEMU aka Quick Emulator does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via vectors involving a buffer descript...