Lucene search
+L

1296 matches found

Veracode
Veracode
added 2021/11/17 10:37 p.m.146 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network...

6.5CVSS3.1AI score0.02923EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.53 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels wifi implementation which allows an attacker within wireless broadcast range to inject custom data into the wireless communication circumventing checks on the data...

3.5CVSS3.6AI score0.03537EPSS
SaveExploits2References15Affected Software2
Veracode
Veracode
added 2021/11/17 10:37 p.m.56 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw in Linux kernel's WiFi implementation which allows an attacker within the wireless range to abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating...

2.6CVSS6.4AI score0.02592EPSS
SaveExploits2References14Affected Software2
Veracode
Veracode
added 2021/11/17 10:36 p.m.150 views

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels implementation of wifi fragmentation handling which allows an attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where...

3.5CVSS2.1AI score0.05765EPSS
SaveExploits2References14Affected Software2
CNNVD
CNNVD
added 2021/11/17 12:0 a.m.4 views

Wireshark 代码问题漏洞

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data messages directly with the NIC. referencing vulnerability. An attacker could exploit this vulnerability to cause a denial of service via packet injection or specially crafted capture files...

7.5CVSS7.8AI score0.05501EPSS
SaveExploits1References17
RedHat Linux
RedHat Linux
added 2021/11/09 6:6 p.m.5 views

kernel: accepting fragmented plaintext frames in protected networks

A vulnerability was found in Linux kernel, where the WiFi implementations assemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or...

6.5CVSS7.1AI score0.04173EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/11/09 5:26 p.m.3 views

kernel: accepting fragmented plaintext frames in protected networks

A vulnerability was found in Linux kernel, where the WiFi implementations assemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or...

6.5CVSS7.1AI score0.04173EPSS
SaveExploits0References4
NVD
NVD
added 2021/09/08 12:15 p.m.29 views

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS0.13186EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/08 12:15 p.m.21 views

Authentication flaw

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS9.6AI score0.13186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/08 11:25 a.m.33 views

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

9.1CVSS9.8AI score0.13186EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 11:25 a.m.119 views

CVE-2020-11264

CVE-2020-11264 is a Qualcomm WLAN vulnerability: improper authentication of Non-EAPOL/WAPI plaintext frames during the four-way handshake can allow arbitrary network packet injection. Affected products include Snapdragon Auto, Compute, Connectivity, and various Snapdragon lines (Mobile, IoT, Indu...

10CVSS8.1AI score0.13186EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2021/09/07 11:38 a.m.42 views

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

7.5CVSS3.8AI score0.01789EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/21 12:18 p.m.7 views

MGASA-2021-0364 Updated wireshark packages fix a security vulnerability

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file CVE-2021-22235...

7.5CVSS7.5AI score0.03296EPSS
SaveExploits1References5
NVD
NVD
added 2021/07/20 12:15 p.m.24 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS0.03296EPSS
SaveExploits1References6
OSV
OSV
added 2021/07/20 12:15 p.m.28 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.9AI score0.03296EPSS
SaveExploits1References6
Prion
Prion
added 2021/07/20 12:15 p.m.29 views

Design/Logic Flaw

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

5CVSS7.4AI score0.03296EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
added 2021/07/20 12:15 p.m.82 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.03296EPSS
SaveExploits1References3
ArchLinux
ArchLinux
added 2021/07/20 12:0 a.m.131 views

[ASA-202107-44] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-202107-44 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-22235 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2160 Summary ======= The package wireshark-cli befo...

7.5CVSS1.8AI score0.03296EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
added 2021/07/20 12:0 a.m.94 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.7AI score0.03296EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/07/20 12:0 a.m.26 views

CVE-2021-22235

Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file...

7.5CVSS3.7AI score0.03296EPSS
SaveExploits1
Rows per page
Query Builder