698 matches found
PT-2024-24485 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability that can be exploited via the qos parameter in the fromqossetting function. This vulnerability may allow attackers to execute arbitrary code,...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a queue priority value that will not map to the correct ieee80211 queue when QoS is disabled...
CVE-2024-32287
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function...
CVE-2024-32287
CVE-2024-32287 affects Tenda W30E firmware v1.0.1.25(633). Multiple sources describe a stack overflow vulnerability in the fromqossetting function triggered via the qos parameter. Red Hat and CNVD entries characterize it as a buffer/stack overflow with potential impact to availability (per CNVD) ...
CVE-2024-32287
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function...
CVE-2024-3877
A vulnerability classified as critical was found in Tenda F1202 1.2.0.20408. Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched remotely. The exploi...
kernel: use-after-free in sch_qfq network scheduler
A use-after-free flaw was found in qfqdequeue and aggdequeue in net/sched/schqfq.c in the Traffic Control QoS subsystem in the Linux kernel. This issue may allow a local user to crash the system or escalate their privileges on the system...
CVE-2024-30916
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted maxsamples parameter in DurabilityService QoS component...
CVE-2024-30917
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted historydepth parameter in DurabilityService QoS component...
DEBIAN-CVE-2024-30916
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted maxsamples parameter in DurabilityService QoS component...
CVE-2024-30916
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted maxsamples parameter in DurabilityService QoS component...
UBUNTU-CVE-2024-30916
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted maxsamples parameter in DurabilityService QoS component...
CVE-2024-30917
CVE-2024-30917 affects eProsima FastDDS v2.14.0 and earlier. A crafted history_depth parameter in DurabilityService QoS can enable a local attacker to cause DoS and leak sensitive information. Evidence across sources confirms the issue but no official patch details are provided in the connected d...
CVE-2024-30917
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted historydepth parameter in DurabilityService QoS component...
CVE-2024-30916
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted maxsamples parameter in DurabilityService QoS component...
CVE-2024-30917
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted historydepth parameter in DurabilityService QoS component...
CVE-2024-30917
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted historydepth parameter in DurabilityService QoS component...
CVE-2024-2894
A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...
kernel: out-of-bounds write in qfq_change_class function
An out-of-bounds memory access flaw was found in the Linux kernel’s traffic control QoS subsystem in how a user triggers the qfqchangeclass function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on t...