PT-2023-3874 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Layer-2 Bridge network driver, allowing remote attackers to execute arbitrary code and...

PT-2023-3832 · Microsoft · Windows Layer-2 Bridge Network Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver affected versions not specified Description: The issue is related to a network driver in the Windows operating system, specifically the Layer-2 Bridge, and involves the disclosure of information...

CVE-2023-3090

A flaw was found in the IPVLAN network driver in the Linux kernel. This issue is caused by missing skb-cb initialization in ipoptionsecho and can lead to an out-of-bounds write stack overflow. This may allow a local user to cause a denial of service or potentially achieve local privilege...

CVE-2023-3090

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLAN is enabled. We...

CVE-2023-3090

CVE-2023-3090 is a Linux kernel vulnerability affecting the ipvlan driver. It causes a heap out-of-bounds write due to missing skb->cb initialization, and is exploitable when CONFIG_IPVLAN is enabled. The issue enables local privilege escalation as described in multiple sources (e.g., Astra Li...

CVE-2023-3090

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLAN is enabled. We...

CVE-2023-3090 Out-of-bounds write in Linux kernel's ipvlan network driver

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIGIPVLAN is enabled. We...

kernel: use-after-free after failed devlink reload in devlink_param_get

A flaw was found in the Netlink device interface implementation in the Linux kernel that improperly handled certain error conditions, leading to a use-after-free issue with some network device drivers. A local attacker with admin access to the network device could use this to cause a denial of...

kernel: iavf: Fix NULL pointer dereference in iavf_get_link_ksettings

A flaw was found in the iavf module in the Linux kernel. A NULL pointer dereference can be triggered due to improper error management, resulting in a denial of service...

PT-2023-2763 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the Linux kernel's Qualcomm Technologies EMAC Gigabit Ethernet Controller driver due to incorrect synchronization in the emac remove functio...

CVE-2022-47456

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

SUSE CVE-2006-6385

Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers aka NDIS miniport drivers before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers...

SUSE CVE-2016-2392

The isrndis function in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via vectors...

SUSE CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

SUSE CVE-2019-17055

basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21...

CVE-2022-47326

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure...

CVE-2022-47323

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

PT-2023-15250 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing permission check in the wlan driver, which could lead to local information disclosure. Recommendations: At the moment, there is no information...

PT-2023-13624 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing parameters check in the wlan driver, which could lead to a local denial of service in wlan services. Recommendations: At the moment, there is ...

PT-2023-15248 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible missing permission check in the wlan driver, which could lead to local information disclosure. Recommendations: At the moment, there is no information...