Lucene search
+L

76 matches found

CVE
CVE
•added 2020/09/08 9:31 a.m.•69 views

CVE-2020-3668

Technical details about CVE-2020-3668 are not publicly available in the provided connected documents. The sources reiterate a buffer overflow during PMF/MCBC frame parsing in Snapdragon devices but do not specify affected components, root cause, impacts, or available fixes.

10CVSS9.4AI score0.01052EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/08 9:31 a.m.•48 views

CVE-2020-3668

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

9.6AI score0.01052EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/06/18 12:00 a.m.•34 views

Cisco IOS XE Software Denial of Service (cisco-sa-ewlc-dos-AnvKvMxR)

According to its self-reported version, Cisco IOS XE Software is affected by a Denial of Service vulnerability. The vulnerability exists because the affected software does not properly validate 802.11w disassociation and deauthentication PMFs that it receives. An unauthenticated, could exploit th...

4.7CVSS5.2AI score0.00467EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/06/10 10:26 p.m.•52 views

Updated wpa_supplicant packages fix security vulnerability

Updated wpasupplicant and hostpad packages fix security vulnerability: A vulnerability was discovered in wpasupplicant. When Access Point AP mode and Protected Management Frames PMF IEEE 802.11w are enabled, wpasupplicant does not perform enough validation on the source address of some received...

6.5CVSS0.8AI score0.01214EPSS
SaveExploits0References5
NVD
NVD
•added 2020/06/03 6:15 p.m.•28 views

CVE-2020-3206

A vulnerability in the handling of IEEE 802.11w Protected Management Frames PMFs of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerabilit...

4.7CVSS4.7AI score0.00467EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/03 6:15 p.m.•30 views

Design/Logic Flaw

A vulnerability in the handling of IEEE 802.11w Protected Management Frames PMFs of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerabilit...

3.3CVSS4.7AI score0.00467EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/06/03 5:40 p.m.•85 views

CVE-2020-3206

CVE-2020-3206 affects Cisco Catalyst 9800 Series Wireless Controllers running IOS XE. The issue is a failure to properly validate IEEE 802.11w Protected Management Frames (PMFs), allowing an unauthenticated, adjacent attacker to terminate a single valid user connection on an affected device. Mult...

4.7CVSS4.6AI score0.00467EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2020/06/03 4:00 p.m.•78 views

Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability

A vulnerability in the handling of IEEE 802.11w Protected Management Frames PMFs of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerabilit...

4.7CVSS2.4AI score0.00467EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/11/12 12:00 a.m.•48 views

Fedora 30 : hostapd (2019-2265b5ae86)

Security fix CVE-2019-16275 AP mode PMF disconnection protection bypass Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

6.5CVSS6.3AI score0.01214EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/09/13 12:00 a.m.•35 views

CVE-2019-16275

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

6.5CVSS6.8AI score0.01214EPSS
SaveExploits0References5
NVD
NVD
•added 2019/09/12 8:15 p.m.•22 views

CVE-2019-16275

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

6.5CVSS6.5AI score0.01214EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2019/09/12 7:07 p.m.•46 views

CVE-2019-16275

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

6.5AI score0.01214EPSS
SaveExploits0References14
AlpineLinux
AlpineLinux
•added 2019/09/12 7:07 p.m.•40 views

CVE-2019-16275

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

6.5CVSS6.7AI score0.01214EPSS
SaveExploits0
CVE
CVE
•added 2019/09/12 7:07 p.m.•513 views

CVE-2019-16275

CVE-2019-16275 affects hostapd and wpa_supplicant prior to 2.10. The root cause is misvalidation of the source address on certain received 802.11 management frames when PMF (IEEE 802.11w) is enabled, enabling a denial-of-service by an attacker within radio range. Impact is Denial of Service (disc...

6.5CVSS6.3AI score0.01214EPSS
SaveExploits0References14Affected Software2
Debian CVE
Debian CVE
•added 2019/09/12 7:07 p.m.•38 views

CVE-2019-16275

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

6.5CVSS6.2AI score0.01214EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2016/09/15 12:00 a.m.•38 views

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2016:2305-1)

This update for wpasupplicant fixes the following issues : - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. bnc930077 - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. bnc930078 - CVE-2015-4143: EAP-pwd missing payload length validation...

5CVSS6AI score0.04168EPSS
SaveExploits0References16
Rows per page
Query Builder