Lucene search
+L

1362 matches found

Veracode
Veracode
added 2021/11/17 10:38 p.m.71 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext...

5.4CVSS2.1AI score0.07604EPSS
SaveExploits0References13Affected Software2
Veracode
Veracode
added 2021/11/17 10:38 p.m.32 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers...

5.3CVSS4.9AI score0.05622EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
added 2021/11/17 10:38 p.m.52 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames...

6.5CVSS2.1AI score0.03515EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.54 views

Network Packet Injection

kernel-rt is vulnerable to network package injection. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 i.e., LLC/SNAP header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent...

6.5CVSS2.8AI score0.04913EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.32 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network...

6.5CVSS3.2AI score0.04173EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.58 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the lack of sanitization of the authenticity of the Message Integrity Check allowing an attacker to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol...

6.5CVSS3.5AI score0.03072EPSS
SaveExploits0References11Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.149 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network...

6.5CVSS3.1AI score0.02923EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.55 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels wifi implementation which allows an attacker within wireless broadcast range to inject custom data into the wireless communication circumventing checks on the data...

3.5CVSS3.6AI score0.03537EPSS
SaveExploits2References15Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.58 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw in Linux kernel's WiFi implementation which allows an attacker within the wireless range to abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating...

2.6CVSS6.4AI score0.02592EPSS
SaveExploits2References14Affected Software2
Veracode
Veracode
added 2021/11/17 10:36 p.m.154 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels implementation of wifi fragmentation handling which allows an attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where...

3.5CVSS2.1AI score0.05765EPSS
SaveExploits2References14Affected Software2
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.7 views

Wireshark 代码问题漏洞

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data messages directly with the NIC. referencing vulnerability. An attacker could exploit this vulnerability to cause a denial of service via packet injection or specially crafted capture files...

7.5CVSS7.8AI score0.05681EPSS
SaveExploits1References17
RedHat Linux
RedHat Linux
added 2021/11/09 6:06 p.m.10 views

kernel: accepting fragmented plaintext frames in protected networks

A vulnerability was found in Linux kernel, where the WiFi implementations assemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or...

6.5CVSS7.1AI score0.04173EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/11/09 5:26 p.m.10 views

kernel: accepting fragmented plaintext frames in protected networks

A vulnerability was found in Linux kernel, where the WiFi implementations assemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or...

6.5CVSS7.1AI score0.04173EPSS
SaveExploits0References4
NVD
NVD
added 2021/09/08 12:15 p.m.64 views

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS0.13186EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/08 12:15 p.m.27 views

Authentication flaw

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS9.6AI score0.13186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/08 11:25 a.m.43 views

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

9.1CVSS9.8AI score0.13186EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 11:25 a.m.128 views

CVE-2020-11264

CVE-2020-11264 is a Qualcomm WLAN vulnerability: improper authentication of Non-EAPOL/WAPI plaintext frames during the four-way handshake can allow arbitrary network packet injection. Affected products include Snapdragon Auto, Compute, Connectivity, and various Snapdragon lines (Mobile, IoT, Indu...

10CVSS8.1AI score0.13186EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2021/09/07 11:38 a.m.46 views

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

7.5CVSS3.8AI score0.01914EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/21 12:18 p.m.10 views

MGASA-2021-0364 Updated wireshark packages fix a security vulnerability

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235...

7.5CVSS7.5AI score0.03296EPSS
SaveExploits1References5
NVD
NVD
added 2021/07/20 12:15 p.m.28 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS0.03296EPSS
SaveExploits1References6
Rows per page
Query Builder