TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3700R version V9.1.2u.616520211012, which originates from eport failing to properly validate the length size of the input data in the function setIpPortFilterRules,...

PT-2024-4356 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the fing dil service,...

Kofax Power PDF Security Vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. A security vulnerability exists in Kofax Power PDF that originates from the failure to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. An attacker could...

Kofax Power PDF Security Vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. A security vulnerability exists in Kofax Power PDF that originates from the failure to properly validate the length of user-supplied data before copying it into a fixed-length heap-based buffer. An attacker could...

TOTOLINK CP450 setUrlFilterRules method stack buffer overflow vulnerability

TOTOLINK CP450 is an outdoor wireless client terminal device manufactured by China Gion Electronics Company TOTOLINK, which is mainly used for wireless broadband access service in rural and remote areas. The TOTOLINK CP450 suffers from a stack buffer overflow vulnerability that stems from the...

SUSE CVE-2024-35896

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 "bpf: Try to avoid kzalloc in cgroup/s,getsockopt" setsockopt @optlen argument should be...

SUSE CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

CVE-2024-35963

A denial of service vulnerability was found in the Linux kernel. No input validation is performed in the Bluetooth hcisock function. This vulnerability could lead to a crash, resulting in the loss of system availability. Mitigation Mitigation for this issue is either not available or the currentl...

DEBIAN-CVE-2024-35967

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported scosocksetsockopt is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copyfromsockptroffset include/linux/sockptr.h:49...

DEBIAN-CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

DEBIAN-CVE-2024-35963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35967

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported scosocksetsockopt is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copyfromsockptroffset include/linux/sockptr.h:49...

UBUNTU-CVE-2024-35963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35896

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 "bpf: Try to avoid kzalloc in cgroup/s,getsockopt" setsockopt @optlen argument should be...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from the PPW parameter of ip/goform/WizardHandle failing to correctly validate the length of the input data, which can be exploited by an attacker to execute...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is a wireless bridge from China Gion Electronics TOTOLINK. The TOTOLINK CP450 suffers from a buffer overflow vulnerability that stems from the CloudACMunualUpdate method failing to properly validate the length size of input data, which can be exploited by an attacker to cause a...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is an outdoor wireless client terminal device manufactured by China Gion Electronics, mainly used for wireless broadband access service in rural and remote areas. The TOTOLINK CP450 suffers from a stack buffer overflow vulnerability that originates from the setLanguageCfg method...

CVE-2023-44407

D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...

Tesla Model 3 安全漏洞

The Tesla Model 3 is an electric vehicle from the American company Tesla. A security vulnerability exists in the Tesla Model 3 that stems from a specific flaw in the bsaserver process that lacks proper validation of the length of user-supplied data before copying it to a heap-based fixed-length...