Lucene search
+L

186 matches found

OSV
OSV
added 2025/03/17 10:20 p.m.8 views

CVE-2025-29911 CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A critical heap buffer overflow vulnerability was identified in the...

9.3CVSS8.1AI score
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tun: Added missing verification for short frames. The referenced commit failed to check the validity of the frame length in the tunxdpone path, which could result in a corrupted skb being sent down the stack. Even before the skb ...

8.8CVSS6.3AI score0.00254EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.8 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tap: added missing verification for short frames The referenced commit failed to check the validity of the frame length in the tapgetuserxdp function, which could result in a corrupted skb being sent down the stack. Even before t...

8.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 2:40 a.m.18 views

CVE-2024-33026

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...

7.5CVSS7AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/05 3:15 p.m.35 views

CVE-2024-33026

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...

7.5CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/05 2:21 p.m.95 views

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

7.5CVSS7.6AI score0.0028EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/05 2:21 p.m.54 views

CVE-2024-33026 Buffer Over-read in WLAN Host

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...

7.5CVSS0.0028EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/29 7:15 a.m.6 views

DEBIAN-CVE-2024-41090

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

7.1CVSS6AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/29 7:15 a.m.6 views

UBUNTU-CVE-2024-41090

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

8.8CVSS6.5AI score0.00254EPSS
SaveExploits0References32
UbuntuCve
UbuntuCve
added 2024/07/29 12:0 a.m.28 views

CVE-2024-41091

In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tunxdpone path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

8.8CVSS6AI score0.00254EPSS
SaveExploits0References31
UbuntuCve
UbuntuCve
added 2024/07/29 12:0 a.m.24 views

CVE-2024-41090

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

8.8CVSS6AI score0.00254EPSS
SaveExploits0References31
SUSE CVE
SUSE CVE
added 2024/07/26 3:11 a.m.3 views

SUSE CVE-2024-41090

In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
added 2024/07/26 3:11 a.m.5 views

SUSE CVE-2024-41091

In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tunxdpone path, which could cause a corrupted skb to be sent downstack. Even before the skb is...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits0References17
OSV
OSV
added 2024/07/02 3:2 p.m.37 views

CLSA-2024-1719932549 kernel: Fix of 20 CVEs

net: iptunnel: make sure to pull inner header in iptunnelrcv CVE-2024-26882 - net: Set true network header for ECN decapsulation CVE-2024-26882 - media: dvb-core: Fix use-after-free due to race at dvbregisterdevice CVE-2022-45884 - media: dvbdev: fix error logic at dvbregisterdevice...

10CVSS6.9AI score0.45301EPSS
SaveExploits2References1
OSV
OSV
added 2024/05/21 3:15 p.m.5 views

DEBIAN-CVE-2021-47251

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix skb length check in ieee80211scanrx Replace hard-coded compile-time constants for header length check with dynamic determination based on the frame type. Otherwise, we hit a validation WARNON in cfg80211 later. styl...

7.8CVSS5.7AI score0.00231EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:21 a.m.6 views

SUSE CVE-2018-20615

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-check...

8.2CVSS7AI score0.04459EPSS
SaveExploits0References5
NVD
NVD
added 2023/02/12 4:15 a.m.35 views

CVE-2022-33279

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length...

9.8CVSS9.9AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/09 6:58 a.m.104 views

CVE-2022-33279

CVE-2022-33279 describes a stack-based buffer overflow in the WLAN module of Qualcomm devices triggered by an invalid WNM frame length, causing memory corruption. The CVSSv3.1 vector indicates a critical, network-exposed issue with no user interaction and no privileges required. Connected sources...

9.8CVSS10AI score0.0045EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/09 6:58 a.m.48 views

CVE-2022-33279 Stack based buffer overflow in WLAN

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length...

9.8CVSS10AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/09 12:0 a.m.7 views

PT-2023-13284 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to memory corruption due to a stack-based buffer overflow in the WLAN component. This occurs when the system encounters an invalid WNM frame length. Recommendations: At th...

9.8CVSS7.5AI score0.0045EPSS
SaveExploits0References3
Rows per page
Query Builder