59 matches found
CVE-2023-45233 Infinite loop in EDK II Network Package
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...
CVE-2023-37281 Out-of-bounds read during IPHC address decompression
Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPHC header decompression, Contiki-NG confirms the received packet buffer contains enough data as needed for that field. But no similar check is done...
CVE-2023-37281
Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPHC header decompression, Contiki-NG confirms the received packet buffer contains enough data as needed for that field. But no similar check is done...
CVE-2023-37281: Out-of-bounds Read
Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPHC header decompression, Contiki-NG confirms the received packet buffer contains enough data as needed for that field. But no similar check is done...
CVE-2022-33239
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::BuildOptionsVal
Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5102080180486144 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000bff27...
zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::BuildOptionsVal
Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5315023186034688 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b00315dd7...
zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::BuildOptionsVal
Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5756801487863808 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6050016822b...
Out-of-bounds
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function uncompresshdriphc does not perform proper boundary chec...
CVE-2021-21410 Out-of-bounds read in the 6LoWPAN implementation
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function uncompresshdriphc does not perform proper boundary chec...
CVE-2021-21410
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function uncompresshdriphc does not perform proper boundary chec...
CVE-2021-21410: Out-of-bounds Read
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function uncompresshdriphc does not perform proper boundary chec...
CVE-2021-25664
A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...
PT-2021-16738 · Unknown · Capital Embedded Ar Classic +3
Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions all through V2303 Nucleus NET versions all Nucleus ReadyStart V3 versions all through V2017.02.4 Nucleus ReadyStart V4 versions all through V4.1.0...
picoTCP-NG and picoTCP Input Validation Error Vulnerabilities
Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...
CVE-2019-14022
CVE-2019-14022 concerns an error in parsing ipv6_header length due to a missing length check in Qualcomm/Snapdragon components (Auto, Compute, IOT, Wearables, Mobile, etc.). Affected family includes Snapdragon platforms (APQ, SDM/SM series, Nicobar, etc.) across numerous devices. Root cause: insu...
PT-2020-9448
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: An error occurs while extracting the ipv6 header due to an invalid length, resulting from a lack of length check in various Snapdragon products, including Snapdragon...
kernel: ipv6_hop_jumbo remote system crash
The ipv6hopjumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service NULL pointer dereference and kernel panic via a crafted IPv6 packet...
