2267 matches found
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet
A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...
AZL-9120 CVE-2022-27666 affecting package kernel for versions less than 5.15.32.1-3
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...
UBUNTU-CVE-2022-27666
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...
The vulnerability in the implementation of the TCP/IP protocol stack for Linux-based operating systems allows a hacker to cause a service failure.
The vulnerability of the TCP/IP protocol stack implementation in Linux-based operating systems is related to errors in processing ICMPv6 packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the skb_page_frag_refill parameter in the implementation of the Linux-based operating system kernel for IPSec protocols allows a attacker to cause a service failure.
The vulnerability of the “skbpagefragrefill” parameter in the implementation of the Linux-based operating system’s IPSec kernel protocol is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Linux kernel安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to a denial-of-service vulnerability that stems from a memory leak in the ICMPv6 network protocol stack. An attacker could exploit the vulnerability by generating and sending...
CVE-2022-25214
Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...
Phicomm多款产品安全漏洞
PHICOMM K2 and others are products of PHICOMM, a China-based company.PHICOMM K2 is a wireless router.PHICOMM K3 is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band...
VulnCheck KEV: CVE-2020-11899
The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability...
The vulnerability of the implementation of the Cisco Fabric Services over IP (CFSoIP) function in Cisco NX-OSS routing devices allows a attacker to trigger a service failure.
The vulnerability of the implementation of the Cisco Fabric Services over IP CFSoIP function in Cisco NX-OSS routing devices is related to an uncontrolled resource consumption during the processing of incoming CFSoIP packets. Exploiting this vulnerability could allow a malicious actor to cause...
CVE-2022-20624
A vulnerability in the Cisco Fabric Services over IP CFSoIP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacke...
Cisco NX-OS Software 输入验证错误漏洞
Cisco NX-OS Software is a suite of data center-grade operating system software for switches from Cisco. Cisco NX-OS Software suffers from an input validation error vulnerability that originates from a vulnerability in the Cisco Fabric Services over IP CFSoIP feature of Cisco NX-OS Software. An...
DEBIAN-CVE-2017-0371
MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attrtitle url;" attack within a DIV element that has an attacker-controlled URL in the title attribute...
The vulnerability of the ip6_xmit function in the (6_output.c) kernel of the Android operating system allows a hacker to increase their privileges.
The vulnerability of the ip6xmit function in the 6output.c kernel of the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the implementation for specifying all domain names and IP addresses using Subject Alternative Names in the Node.js software platform allows attackers to perform spoofing attacks.
The vulnerability of the method for specifying all domain names and IP addresses in a Node.js software platform is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to perform spoofing attacks remotely...
CVE-2021-45392
A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21CN in the sub422CE4 function in page /goform/setIPv6Status via the prefixDelegate parameter, which causes a Denial of Service...
PT-2022-15982 · Axis · Axis Ip Utility
Name of the Vulnerable Software and Affected Versions: AXIS IP Utility versions prior to 4.18.0 Description: The issue allows for remote code execution and local privilege escalation through DLL hijacking. IPUtility.exe attempts to load DLLs from its current working directory, which could allow f...
Appneta Tcpreplay 安全漏洞
Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Appneta Tcpreplay 4.3.4, which stems from a Reachable Assertion in tree.c's addtreeipv6...
CVE-2022-23029
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which ha...
