Altran picoTCP and picoTCP-NG Buffer Error Vulnerability

Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...

CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

USN-4622-1: OpenLDAP vulnerability

It was discovered that OpenLDAP incorrectly handled certain network packets. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-4622-1 openldap vulnerability

It was discovered that OpenLDAP incorrectly handled certain network packets. A remote attacker could use this issue to cause OpenLDAP to crash, resulting in a denial of service, or possibly execute arbitrary code...

tcpdump: Buffer over-read in icmp_print() function in print-icmp.c

An out-of-bounds read flaw was discovered in tcpdump while printing ICMP packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application. System availability...

tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c

An out-of-bounds read vulnerability was discovered in tcpdump while printing RSVP packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application...

Vulnerability fixed in Red Hat OpenShift

Red Hat has fixed a vulnerability in OpenShift. The vulnerability allows a malicious owner of a pod to possible to bypass a security measure in the restricted Context Constraints Object to bypass. This enables the malicious person to enabled to send custom network packets. Red Hat scales this...

Low: Red Hat Security Advisory: OpenShift Container Platform 4.5.16 security update

Red Hat OpenShift Container Platform release 4.5.16 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which give...

The vulnerability of the set_WAN6 interface in Xiaomi R3600 router software allows a attacker to execute arbitrary code on the target system.

The vulnerability of the setWAN6 interface in Xiaomi R3600 router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by sending specially crafted network packets...

Debian DSA-4763-1 : teeworlds - security update

It was discovered that insufficient sanitising of received network packets in the game server of Teeworlds, an online multi-player platform 2D shooter, could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

PT-2020-4298

Name of the Vulnerable Software and Affected Versions: Xiaomi R3600 ROM version prior to 1.0.66 Description: The issue is related to insufficient input validation in the set WAN6 interface of the Xiaomi R3600 router's firmware, allowing filters to be bypassed. This can lead to remote code...

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Memory corruption

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17397

CVE-2020-17397 affects Parallels Desktop (notably 15.1.4) where a memory corruption triggered by improper validation of data in network packet handling allows local privilege escalation to the hypervisor context. Exploitation requires high-privilege code execution on the target guest; no public e...

CVE-2020-17397: Improper Restriction of Operations within the Bounds of a Memory Buffer

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Parallels Desktop Out-of-Bounds Access Elevation of Privilege Vulnerability (CNVD-2020-46859)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds access elevation of privilege vulnerability exists in the handling of network packets in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of...

Parallels Desktop Networking Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

PT-2020-14948

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to...

Monero (Lithium Luna) Epee library security vulnerability

Monero Lithium Luna is a digital currency. Epee library is one of the open source Levin libraries.A security vulnerability exists in the Levin deserialization feature of Epee library used in Monero Lithium Luna version 0.12.2.0-master-ffab6700 and other cryptocurrencies. An attacker could exploit...