7511 matches found
CVE-2022-25663
CVE-2022-25663 relates to a buffer overflow in Qualcomm Snapdragon WLAN components (Compute/Connectivity/Consumer Electronics Connectivity) caused by a lack of buffer length checks during management frame Rx handling, leading to denial of service. Connected documents confirm the root cause and af...
The vulnerability of the Vim text editor, related to pointer naming errors, allows a hacker to trigger a service failure.
The vulnerability of the Vim text editor is related to errors in pointer manipulation when processing the eval1 frame root/vim/src/vim. Exploiting this vulnerability can allow an attacker to cause a service failure...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...
Semtech LoRaMac-node 安全漏洞
Semtech LoRaMac-node is a reference implementation of a LoRa network node from Semtech Corporation, USA. A security vulnerability exists in LoRaMac-node versions prior to 4.7.0, which stems from the fact that its failure to properly validate the size of incoming radio frames could result in an...
PT-2022-24862 · Unknown · Loramac-Node
Name of the Vulnerable Software and Affected Versions: LoRaMac-node versions prior to 4.7.0 Description: The issue is caused by improper size validation of incoming radio frames, which can lead to a buffer overflow. Specifically, the function ProcessRadioRxDone expects incoming radio frames to ha...
Excessive grant frame usage in Windows xenbus drivers after version 9.1.3
A VM with 2 VBD, 8 vCPUs, 7 VIFs may consume over 90 grant tables, but ONLY consume 26grant tables when running with xen PV driver version 9.1.2. It will lead to virtual NIC initialization failure issue after Windows VM startup. Device manager shows NICs are notinitialized: Setupapi.log : Device...
CVE-2022-41427
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...
UBUNTU-CVE-2022-41427
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from a memory leak in the AP4AvcFrameParser::Feed method of the mp4mux component...
PT-2022-25861 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux. Recommendations: For Bento4 version 1.6.0-639, consider updating to a newer version that contains a fix for this issue,...
CVE-2021-27862
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...
CVE-2021-27854
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers and Ethernet to Wifi frame translation...
CVE-2022-20945
A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points APs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain...
CVE-2022-20945
CVE-2022-20945 involves Cisco Catalyst 9100 Series Access Points. The issue is in the 802.11 association frame validation, caused by insufficient input validation of parameters in association request frames received by the AP. A nearby, unauthenticated attacker can trigger a denial-of-service by ...
The vulnerability of the WLAN HOST microprogramming system component in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the WLAN HOST microprogramming system component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary during frame decompression. Exploiting this vulnerability can allow a remote attacker to cause service failures ...
Cisco Catalyst 9100 Series Denial of Service Vulnerability
Catalyst 9800 series is a wireless controller from Cisco. A denial of service vulnerability exists in the Cisco Catalyst 9100 Series, which arises from a security issue in the 802.11 correlation frame authentication of the Catalyst 9100 Series access points APs, and can be exploited by an...
Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability
A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points APs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain...
Cisco Catalyst 输入验证错误漏洞
Catalyst 9800 series is a wireless controller from Cisco. A denial of service vulnerability exists in the Cisco Catalyst 9100 Series, which arises from a security issue in the 802.11 correlation frame authentication of the Catalyst 9100 Series access points APs, and can be exploited by an...
CVE-2021-27854
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...