Design/Logic Flaw

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

CVE-2021-22222

Wireshark is affected by CVE-2021-22222 due to an infinite loop in the DVB-S2-BB dissector, impacting 3.4.0 through 3.4.5 and enabling a denial-of-service via crafted captures or packet injection. The issue originates in the DVB-S2-BB parser; exploiting it causes the Wireshark process to hang, co...

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

What Is MITM (Man-in-the Middle) Attack❓ Types and detection methods

A man-in-the-middle MitM represents a sort of cyberattack where an intruder covertly taps transmissions connecting two entities to monitor or alter traffic therebetween. Malicious ones may utilize MitM attacks to seize passwords or other sensitive data, snoop on the prey, disrupt connections, or...

The vulnerability of the communication standards for IEEE 802.11 operating systems on Windows allows a intruder to inject arbitrary network packets.

The vulnerability of the IEEE 802.11 communication standard for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets remotely...

The vulnerability of the implementations of WPA and WPA2 driver 6.1316.1209 Wi-Fi adapter ALFA allows a intruder to inject and decode packets in WPA or WPA2 networks.

The vulnerability of WPA and WPA2 driver version 6.1316.1209 Wi-Fi adapter implementations lies in the lack of verification of the integrity of fragmented TKIP packets. Exploiting this vulnerability allows a malicious actor to inject and decode packets in WPA or WPA2 networks remotely...

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the operating system OpenBSD allows a hacker to inject arbitrary network packets.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the OpenBSD operating system exists due to the lack of measures to neutralize these special elements. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets remotely...

CVE-2020-26147

A flaw was found in ieee80211rxhdefragment in net/mac80211/rx.c in the Linux Kernel's WiFi implementation. This vulnerability can be abused to inject packets or exfiltrate selected fragments when another device sends fragmented frames, and the WEP, CCMP, or GCMP data-confidentiality protocol is...

CVE-2020-26141

A vulnerability was found in Linux kernel's WiFi implementation. An attacker within wireless range can inject a control packet fragment where the kernel does not verify the Message Integrity Check authenticity of fragmented TKIP frames. Mitigation Mitigation for this issue is either not available...

Linux kernel input validation error vulnerability (CNVD-2021-34677)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 5.8.9. The vulnerability stems from when a device sends segmented frames and uses the WEP, CCMP, or GCMP data...

Samsung Galaxy S3 Input Validation Error Vulnerability (CNVD-2021-34678)

The Samsung Galaxy S3 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Galaxy S3 i9305 version 4.4.4. An attacker can inject selected network packets...

Linux kernel input validation error vulnerability (CNVD-2021-34682)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel version 5.8.9. The vulnerability stems from when a device sends segmented frames and uses the WEP, CCMP, or GCMP...

Samsung Galaxy S3 Input Validation Error Vulnerability

The Samsung Galaxy S3 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Galaxy S3 i9305 version 4.4.4. An attacker can inject arbitrary network packets independent of the network configuration...

OpenBSD Input Validation Error Vulnerability

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD Openbsd project team. A security vulnerability exists in OpenBSD version 6.6. An attacker can inject arbitrary network packets independent of the network configuration...

Security Advisory 0063

Security Advisory 0063 PDF Updated: May 25th, 2021 Revision | Date | Changes ---|---|--- 1.0 | May 12th, 2021 | Initial Release 1.1 | May 25th, 2021 | Updated assessment with impacted platforms, detection and mitigation. 1.2 | June 9, 2021 | Updated assessment 1.3 | August 19, 2021 | Updated...

DEBIAN-CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames...

CVE-2020-26144

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 i.e., LLC/SNAP header for EAPOL. An adversary can abuse this to inject arbitrary network packets...