CVE-2022-39065

A single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices...

CVE-2022-39065: Improper Handling of Unexpected Data Type

A single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices...

IKEA TRÅDFRI smart lighting 安全漏洞

IKEA TRÅDFRI smart lighting is a range of smart lighting devices from the Dutch company IKEA. A security vulnerability exists in the IKEA TRÅDFRI smart lighting system, which can be exploited by an attacker to send a single mis-formatted IEEE 802.15.4 Zigbee frame that will cause the TRÅDFRI bulb...

ALPINE-CVE-2022-42719

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers able to inject WLAN frames to crash the kernel and potentially execute code...

CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.2 through 5.19.14 that stems from post-release reuse in the mac80211 stack when parsing multiple BSSID elements, whic...

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2022-25663

CVE-2022-25663 relates to a buffer overflow in Qualcomm Snapdragon WLAN components (Compute/Connectivity/Consumer Electronics Connectivity) caused by a lack of buffer length checks during management frame Rx handling, leading to denial of service. Connected documents confirm the root cause and af...

Vim Pointer Naming Error DoS

The vulnerability of the Vim text editor is related to errors in pointer manipulation when processing the eval1 frame root/vim/src/vim. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-24706

Name of the Vulnerable Software and Affected Versions TRÅDFRI bulb affected versions not specified Description The issue arises when an attacker sends a single malformed IEEE 802.15.4 Zigbee frame, causing the TRÅDFRI bulb to blink. If the same frame is replayed multiple times, the bulb performs ...

netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

PT-2022-24862 · Unknown · Loramac-Node

Name of the Vulnerable Software and Affected Versions: LoRaMac-node versions prior to 4.7.0 Description: The issue is caused by improper size validation of incoming radio frames, which can lead to a buffer overflow. Specifically, the function ProcessRadioRxDone expects incoming radio frames to ha...

Semtech LoRaMac-node 安全漏洞

Semtech LoRaMac-node is a reference implementation of a LoRa network node from Semtech Corporation, USA. A security vulnerability exists in LoRaMac-node versions prior to 4.7.0, which stems from the fact that its failure to properly validate the size of incoming radio frames could result in an...

Excessive grant frame usage in Windows xenbus drivers after version 9.1.3

A VM with 2 VBD, 8 vCPUs, 7 VIFs may consume over 90 grant tables, but ONLY consume 26grant tables when running with xen PV driver version 9.1.2. It will lead to virtual NIC initialization failure issue after Windows VM startup. Device manager shows NICs are notinitialized: Setupapi.log : Device...

CVE-2022-41427

Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...

UBUNTU-CVE-2022-41427

Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...

PT-2022-25861

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639 Description A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux. Recommendations For Bento4 version 1.6.0-639, consider updating to a newer version that contains a fix for this issue, althou...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from a memory leak in the AP4AvcFrameParser::Feed method of the mp4mux component...

CVE-2021-27862

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...