UBUNTU-CVE-2019-17053

ieee802154create in net/ieee802154/socket.c in the AFIEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7...

CVE-2019-17053

ieee802154create in net/ieee802154/socket.c in the AFIEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7...

CVE-2019-17053: Incorrect Default Permissions

ieee802154create in net/ieee802154/socket.c in the AFIEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7...

PT-2019-4750

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the ieee802154 create function in the AF IEEE802154 network module, which does not enforce the CAP NET RAW capability. This means that unprivileged users can create a raw...

CVE-2018-9260: Improper Input Validation

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs...

PT-2018-18938

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The IEEE 802.15.4 dissector in Wireshark could crash due to an issue with allocation. This was fixed by ensuring an allocation step occurs in the...

Linux DoS

The vulnerability of the Linux operating system’s driver/net/ieee802154/atusb.c component is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures or other effects such as memory corruption to occur locally...

CVE-2017-5548: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual...

PT-2017-1182

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x before 4.9.6 Description The issue is related to resource management errors in the drivers/net/ieee802154/atusb.c component of the Linux operating system. It can be exploited by a local attacker to cause a denial of...

CVE-2013-7281

CVE-2013-7281 affects the Linux kernel’s dgram_recvmsg in net/ieee802154/dgram.c and allows local users to leak kernel stack memory by updating a length value without initializing an associated data structure. The issue is fixed in kernel 3.12.4 (patch referenced in changelog), with exposure via ...

CVE-2013-7281: Exposure of Sensitive Information to an Unauthorized Actor

The dgramrecvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a 1 recvfrom, 2...

PT-2014-3330

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description The issue allows local users to obtain sensitive information from kernel stack memory. This can be achieved via certain system calls, including recvfrom, recvmmsg, or recvmsg. The dgram recvmsg...

CVE-2013-6336

The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-6336: Improper Input Validation

The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service application crash via a crafted packet...