CVE-2022-47100

A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...

CVE-2022-47100

The CVE-2022-47100 entry concerns Sengled Smart bulb version 0x0000024, where a vulnerability allows an attacker to arbitrarily perform a factory reset via a crafted IEEE 802.15.4 frame. The available data identifies impact as availability loss (device reset), with CVSS v3.1 metrics showing Netwo...

CVE-2022-47100

A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...

CVE-2022-46457

A segmentation fault caused by an invalid memory read access was found in NASM. The issue occurs when a specially crafted file is processed by NASM using the IEEE output file format, causing the application to crash...

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

...

AZL-12934 CVE-2022-46457 affecting package nasm for versions less than 2.16-1

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

PT-2023-9324 · Unknown +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM version 2.16 Description: The issue is related to a segmentation violation in the ieee write file component at /output/outieee.c of the Netwide Assembler NASM. This can lead to a denial of service. The problem is...

linuxptp bug fix update

An update is available for linuxptp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linuxptp packages provide Precision Time Protocol PTP implementation for...

PT-2022-36700 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the add ff action, dissect ieeeNUMBER pv0, and dissect...

GLSA-202210-04 : Wireshark: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-04 Wireshark: Multiple Vulnerabilities - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235 - NULL pointer exception i...

Design/Logic Flaw

A single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices...

UBUNTU-CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

CVE-2022-39065

CVE-2022-39065 affects IKEA TRÅDFRI gateway. A single malformed IEEE 802.15.4 (Zigbee) frame, delivered as an unauthenticated broadcast message, can unanchor the gateway , making connected lighting unresponsive to the IKEA Home Smart app and TRÅDFRI remote control. The vulnerability is exploitabl...

CVE-2022-39064

The CVE-2022-39064 issue affects IKEA TRÅDFRI smart lighting bulbs via a single malformed IEEE 802.15.4 (Zigbee) frame. A broadcast, unauthenticated Zigbee frame can cause the bulb to blink, and replaying the same frame multiple times can trigger a factory reset, causing loss of Zigbee network co...

CVE-2022-39065

A single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices...

GSD-2022-1006395 ieee802154: cc2520: add rc code in cc2520_tx()

ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.144 by commit...

L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers

Overview Layer-2 L2 network security controls provided by various devices, such as switches, routers, and operating systems, can be bypassed by stacking Ethernet protocol headers. An attacker can send crafted packets through vulnerable devices to cause Denial-of-service DoS or to perform a...

Ubuntu: Security Advisory (USN-5299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4185-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3659

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability...