TOTOLINK CP450 setUrlFilterRules method stack buffer overflow vulnerability

TOTOLINK CP450 is an outdoor wireless client terminal device manufactured by China Gion Electronics Company TOTOLINK, which is mainly used for wireless broadband access service in rural and remote areas. The TOTOLINK CP450 suffers from a stack buffer overflow vulnerability that stems from the...

SUSE CVE-2024-35896

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 "bpf: Try to avoid kzalloc in cgroup/s,getsockopt" setsockopt @optlen argument should be...

SUSE CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

CVE-2024-35963

A denial of service vulnerability was found in the Linux kernel. No input validation is performed in the Bluetooth hcisock function. This vulnerability could lead to a crash, resulting in the loss of system availability. Mitigation Mitigation for this issue is either not available or the currentl...

DEBIAN-CVE-2024-35963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Fix not validating setsockopt user input Check user input length before copying data...

DEBIAN-CVE-2024-35967

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported scosocksetsockopt is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copyfromsockptroffset include/linux/sockptr.h:49...

DEBIAN-CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35964

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data...

UBUNTU-CVE-2024-35967

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported scosocksetsockopt is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copyfromsockptroffset include/linux/sockptr.h:49...

UBUNTU-CVE-2024-35896

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 "bpf: Try to avoid kzalloc in cgroup/s,getsockopt" setsockopt @optlen argument should be...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from the PPW parameter of ip/goform/WizardHandle failing to correctly validate the length of the input data, which can be exploited by an attacker to execute...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is an outdoor wireless client terminal device manufactured by China Gion Electronics, mainly used for wireless broadband access service in rural and remote areas. The TOTOLINK CP450 suffers from a stack buffer overflow vulnerability that originates from the setLanguageCfg method...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is a wireless bridge from China Gion Electronics TOTOLINK. The TOTOLINK CP450 suffers from a buffer overflow vulnerability that stems from the CloudACMunualUpdate method failing to properly validate the length size of input data, which can be exploited by an attacker to cause a...

CVE-2023-44407

D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...

Tesla Model 3 安全漏洞

The Tesla Model 3 is an electric vehicle from the American company Tesla. A security vulnerability exists in the Tesla Model 3 that stems from a specific flaw in the bsaserver process that lacks proper validation of the length of user-supplied data before copying it to a heap-based fixed-length...

Exim 安全漏洞

Exim is an open source messaging agent MTA from Exim Open Source that runs on Unix systems and is responsible for routing, forwarding, and delivering mail. A security vulnerability exists in Exim that stems from a lack of proper validation of the length of user-supplied data before copying it to ...

Hancom Office 安全漏洞

Hancom Office is a mobile office program from the Korean company Hancom. The program supports viewing and editing documents in multiple formats. A security vulnerability exists in Hancom Office that stems from a lack of proper validation of the length of user-supplied data before copying it to a...

Delta Electronics CNCSoft 安全漏洞

Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft-G2, which stems from a lack of proper validation of the length of user-supplied data before copying it into a stack-based...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from failing to properly validate the length size of input data via the page parameter in ip/goform/addressNat. No details of the vulnerability are available at th...