CVE-2024-28957: Generation of Predictable Numbers or Identifiers

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...

Out-of-bounds

The buffer obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header e.g. header.count, causing checks e.g. size checks in kernel code to be invalid. This may lead to...

PT-2023-21825 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves kernel APIs, such as cam mem get cpu buf, where a buffer may remain readable and writable in userspace after being accessed by the kernel. This can lead to a race...

CVE-2023-35849: Improper Check for Unusual or Exceptional Conditions

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-28703: Stack-based Buffer Overflow

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate...

SUSE CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

SUSE CVE-2016-5358

epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

National Health Insurance 缓冲区错误漏洞

National Health Insurance NHI is a health insurance program health insurance card in Taiwan, China. A security vulnerability exists in National Health Insurance that stems from insufficient validation of network packet header lengths and a stack-based buffer overflow, which could be exploited by ...

CVE-2022-35217: Out-of-bounds Write

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or...

Input validation

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

OSV-2020-1383 Container-overflow in grk::T2Decode::read_packet_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24427 Crash type: Container-overflow READ 8 Crash state: grk::T2Decode::readpacketheader grk::T2Decode::decodepacket grk::T2Decode::decodepackets...

CVE-2019-15234: Allocation of Resources Without Limits or Throttling

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

PT-2020-9634

Name of the Vulnerable Software and Affected Versions SHAREit versions 4.0.6.177 and earlier Description The issue arises from the failure to check the body length from the received packet header, which is used to allocate memory for the next set of data. This could lead to a system denial of...

CVE-2019-14941: Allocation of Resources Without Limits or Throttling

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

shareit-cwe-789

shareit-cwe-789 - Uncontrolled Memory Allocation CVE-2019-1494...

CVE-2019-1833: Protection Mechanism Failure

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

Race condition

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

Race condition

A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service DoS condition. The vulnerability is due to the incomplete error handli...

PT-2019-14861

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense Software versions prior to 6.2.3.4 Description A vulnerability in the detection engine could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a...