Lucene search
+L

89 matches found

OSV
OSV
•added 2024/03/03 9:15 p.m.•8 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS7.3AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2024/03/03 9:15 p.m.•38 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS7.1AI score0.00937EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/03 9:15 p.m.•17 views

Design/Logic Flaw

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.8AI score0.00937EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/03 12:00 a.m.•7006 views

CVE-2024-28084

CVE-2024-28084 affects iNet wireless daemon (IWD) p2putil.c up to version 2.15. The issue stems from initialization during parsing of advertised service information, enabling denial of service via daemon crash and possibly other unspecified impact. Fedora advisories indicate fixes in iwd 2.16 and...

7.5CVSS7.9AI score0.00937EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/03 12:00 a.m.•4 views

CVE-2024-28084: Improper Initialization

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS5.8AI score0.00937EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/03 12:00 a.m.•12 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.8AI score0.00937EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/03/03 12:00 a.m.•40 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

8.2AI score0.00937EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/03/03 12:00 a.m.•52 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS8AI score0.00937EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/02/26 12:00 a.m.•26 views

Debian: Security Advisory (DSA-5631-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References2
Debian
Debian
•added 2024/02/25 10:45 a.m.•140 views

[SECURITY] [DSA 5631-1] iwd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5631-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 25, 2024 https://www.debian.org/security/faq -...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0
OSV
OSV
•added 2024/02/25 12:00 a.m.•19 views

DSA-5631-1 iwd - security update

Bulletin has no description...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/02/25 12:00 a.m.•37 views

Debian dsa-5631 : iwd - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5631 advisory. - The Access Point functionality in eapolauthkeyhandle in eapol.c in iNet wireless daemon IWD before 2.14 allows attackers to gain unauthorized access to a protected...

7.5CVSS7.7AI score0.01103EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/02/23 12:00 a.m.•21 views

Debian: Security Advisory (DLA-3738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/22 5:15 p.m.•16 views

AZL-43933 CVE-2023-52161 affecting package iwd 1.22-2

The Access Point functionality in eapolauthkeyhandle in eapol.c in iNet wireless daemon IWD before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key...

7.5CVSS5.8AI score0.01103EPSS
SaveExploits0References1
Debian
Debian
•added 2024/02/22 3:08 p.m.•92 views

[SECURITY] [DLA 3738-1] iwd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3738-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 22, 2024 https://wiki.debian.org/LTS -...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•2 views

CVE-2023-52161: Improper Authentication

The Access Point functionality in eapolauthkeyhandle in eapol.c in iNet wireless daemon IWD before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key...

7.5CVSS5.9AI score0.01103EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/22 12:00 a.m.•35 views

DLA-3738-1 iwd - security update

Bulletin has no description...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/02/22 12:00 a.m.•34 views

Debian dla-3738 : iwd - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3738 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3738-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References4
CVE
CVE
•added 2024/02/22 12:00 a.m.•413 views

CVE-2023-52161

CVE-2023-52161 affects iNet Wireless Daemon (IWD) via the Access Point path in eapol_auth_key_handle (eapol.c); vulnerable in IWD versions before 2.14. An attacker can complete the EAPOL handshake by skipping Msg2/Msg4 and sending Msg4/4 with an all-zero key to gain unauthorized access to a prote...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0References13Affected Software1
Veracode
Veracode
•added 2024/02/20 3:58 p.m.•28 views

Improper Authentication

iNet wireless daemon IWD is vulnerable to Improper Authentication. The vulnerability is due to an oversight that allows attackers to exploit the EAPOL handshake process by skipping Msg2/4 and sending Msg4/4 with an all-zero key, thereby gaining unauthorized access to a protected Wi-Fi network...

7.5CVSS6.7AI score0.01103EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder