Buffer overflow

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1965

CVE-2021-1965 describes a buffer overflow in Qualcomm WLAN/MBSSID handling caused by missing parameter length checks during MBSSID scan IE parsing in Snapdragon components (Auto/Compute/Connectivity/Mobile/Wired). The NVD/Red Hat entries rate it Critical (CVSSv3.1: 9.8, Network, No privileges, Us...

CVE-2021-1954

The CVE-2021-1954 issue is a buffer over-read in Qualcomm’s Snapdragon family (parsing FILS indication IE) caused by improper validation of the data pointer. Affects Qualcomm/ Snapdragon components; CVSS v3.1 indicates high severity (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network lead and high...

CVE-2021-1954

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1945

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1943

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1943

CVE-2021-1943 describes a buffer out-of-bounds read due to improper TBTT count/length validation when parsing beacon responses in Qualcomm Snapdragon WLAN components across Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wired Infrastructure and Networking. The vulnerability d...

CVE-2021-1938

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Vulristics: Microsoft Patch Tuesdays Q2 2021

Hello everyone! Lets now talk about Microsoft Patch Tuesday vulnerabilities for the second quarter of 2021. April, May and June. Not the most exciting topic, I agree. I am surprised that someone is reading or watching this. For me personally, this is a kind of tradition. Plus this is an opportuni...

Top 10 Cloud security tips

About half of the pen tests we’re asked to do involved cloud services at some point. We’ve even tested a cloud platform on an aeroplane – the irony was not lost on us! There is a multitude of ways to improve the security of your cloud platforms and often those ways are ever-changing or obscured...

Unauthorized Access Vulnerability in Hikvision Networking Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered intelligent IoT solution and big data service provider. An unauthorized access vulnerability exists in the Hikvision networking gateway, which can be exploited by attackers to obtain sensitive information...

Logic Flaw Vulnerability in Hikvision Networking Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A logic flaw vulnerability exists in the Hikvision networking gateway, which can be exploited by attackers to obtain...

OpenJDK 7 <= 7u231 / 8 <= 8u222 / 11.0.0 <= 11.0.4 / 13.0.0 <= 13.0.0 Multiple Vulnerabilities (2019-10-15)

The version of OpenJDK installed on the remote host is prior to 7 = 7u231 / 8 = 8u222 / 11.0.0 = 11.0.4 / 13.0.0 = 13.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019-10-15 advisory. Please Note: Java CVEs do not always include OpenJDK versions, but are...

Information Disclosure Vulnerability in HIKVISION Networking Gateway

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An information leakage vulnerability exists in the HIKVISION networking gateway, which can be exploited by attackers to obtain sensitive information...

Fedora: Security Advisory for libslirp (FEDORA-2021-7cd749f133)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libslirp (FEDORA-2021-71de23bedd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Weak password vulnerability in IVMS-8201E-NCG at Hangzhou Hikvision Digital Technology Co.

IVMS-8201E-NCG is a telecom-grade networking gateway device integrating signaling gateway service, media gateway service, security authentication, rights management, log management and network management functions, which can realize cascading and interconnection between video surveillance platfor...

Arbitrary File Download Vulnerability in Networking Gateway of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. An arbitrary file download vulnerability exists in the networking gateway of Hangzhou Hikvision Digital Technology Co. Ltd,...

[SECURITY] Fedora 33 Update: libslirp-4.3.1-5.fc33

A general purpose TCP-IP emulator used by virtual machine hypervisors to provide virtual networking services...

SQL Injection Vulnerability in Networking Gateway of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the networking gateway of Hangzhou Hikvision Digital Technology Co. Ltd, which can ...