CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

Stack overflow

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

CVE-2022-27255 affects Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1. The SIP ALG component that rewrites SDP data has a stack-based buffer overflow, enabling an attacker to remotely execute code without authentication by sending a crafted SIP packet containing malicious SDP data. The NVD metrics ra...

PT-2022-4237

Name of the Vulnerable Software and Affected Versions Realtek eCos RSDK version 1.5.7p1 Realtek MSDK version 4.9.4p1 Description The SIP ALG function in Realtek eCos RSDK and MSDK has a stack-based buffer overflow that allows an attacker to remotely execute code without authentication via a craft...

CVE-2022-27255: Improper Input Validation

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

Realtek AP-Router SDK 输入验证错误漏洞

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. The Realtek AP-Router SDK suffers from an input validation error vulnerability that originates from remote code execution via a crafted SIP packet containing malicious SDP data...

GSD-2022-1004496 irqchip/realtek-rtl: Fix refcount leak in map_interrupts

irqchip/realtek-rtl: Fix refcount leak in mapinterrupts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

PT-2022-32758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.48 Description A refcount leak was discovered in the map interrupts function of the irqchip/realtek-rtl driver. The issue was introduced in version v5.12 and is fixed in version v5.15.49. The actual...

PT-2022-32560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.18.5 Description A refcount leak was discovered in the map interrupts function of the irqchip/realtek-rtl driver. The issue was introduced in version v5.12 and is fixed in version v5.18.6. The actual impa...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

Command injection

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK (Realtek RTL819x-SDK) is affected by CVE-2022-29558. The issue exists in versions prior to 3.6.1 and stems from insufficient validation of the receive buffer, enabling command injection via the web interface. Affected component: rtl819x-SDK web interface; root cause: inadequat...

CVE-2022-29558: Improper Neutralization of Special Elements used in a Command

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

Realtek rtl819x-SDK 命令注入漏洞

Realtek rtl819x-SDK is a new/clean Linux kernel driver/module from Realtek Semiconductor China. It is used for IEEE 802.11 wireless Ethernet adapters based on Realtek's RTL8180L and RTL8185L chipsets. A security vulnerability exists in versions prior to Realtek rtl819x-SDK v3.6.1, which stems fro...

PT-2022-19697 · Realtek · Realtek Rtl819X-Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x-SDK versions prior to 3.6.1 Description: The issue allows command injection over the web interface. This can potentially be exploited to execute unauthorized commands on the affected system. Recommendations: For versions prior...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and Networ...