Binary vulnerability in Windows rndis 6.0 driver (CNVD-2020-56099)

rndis is the remote network driver interface protocol for W10 systems. A binary vulnerability exists in the Windows rndis 6.0 driver, which can be exploited by attackers to cause a denial of service...

Binary vulnerability in Windows rndis 5.1 driver (CNVD-2020-56101)

rndis is the remote network driver interface protocol for W10 systems. A binary vulnerability exists in the Windows rndis 5.1 driver, which can be exploited by attackers to cause a denial-of-service attack...

Binary Vulnerability in Windows rndis 5.1 Driver

rndis is the remote network driver interface protocol for W10 systems. A binary vulnerability exists in the Windows rndis 5.1 driver, which can be exploited by attackers to cause a denial-of-service attack...

CVE-2020-12494

Beckhoff TwinCAT RT network driver for Intel 8254x/8255x EtherCAT functionality contains a padding issue: non-realtime frames are not padded to the minimum Ethernet frame size, causing arbitrary memory content to be transmitted in the padding bytes. This can lead to memory disclosure, with the mo...

CVE-2020-12494: Incomplete Cleanup

Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less tha...

PT-2020-6827

Name of the Vulnerable Software and Affected Versions Beckhoff TwinCAT RT affected versions not specified Description The issue is related to the disclosure of information in the TwinCAT RT network driver. It can be exploited by a remote attacker to reveal protected information. The driver's...

UBUNTU-CVE-2020-12654

An issue was found in Linux kernel before 5.5.4. mwifiexretwmmgetstatus in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591...

CVE-2019-15877

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

Command injection

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

Command injection

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged user...

CVE-2019-15876

CVE-2019-15876: In FreeBSD, driver-specific oce(4) ioctl(2) handlers failed to check privileges, allowing unprivileged users to send passthrough commands to device firmware. Affects FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEA...

CVE-2019-15876

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged user...

CVE-2019-15877

CVE-2019-15877 affects FreeBSD ixl(4): driver-specific ioctl handlers fail to verify privileges, allowing unprivileged users to trigger updates to the device’s non-volatile memory in FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3. The FreeBSD security advisory SA-20:06...

CVE-2019-15877

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

CVE-2019-15877

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

CVE-2019-15876: Missing Authorization

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged user...

CVE-2019-15877: Missing Authorization

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

Integer Overflow

The kernel-rt is vulnerable to Integer Overflow. A flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interface may be split across multiple hardware receive descriptors. Receipt of such a frame could leak through a validation check,...

Buffer overflow

hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...

PT-2020-9764

Name of the Vulnerable Software and Affected Versions FreeBSD versions 12.1-STABLE before r356089 FreeBSD versions 12.1-RELEASE before 12.1-RELEASE-p3 FreeBSD versions 11.3-STABLE before r356090 FreeBSD versions 11.3-RELEASE before 11.3-RELEASE-p7 Description The issue arises from driver specific...