kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

A flaw was found in the Linux kernel. The rtlusbprobe function mishandles resource cleanup on error. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability...

FreeBSD : FreeBSD -- ure device driver susceptible to packet-in-packet attack (bb53af7b-f7e4-11ea-88f8-901b0ef719ab)

A programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes. An adversary can exploit this to cause the driver to misinterpret part of the payload o...

PT-2021-12655

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.2-STABLE before r365730 FreeBSD versions 11.4-STABLE before r365738 FreeBSD versions 12.1-RELEASE before p10 FreeBSD versions 11.4-RELEASE before p4 FreeBSD versions 11.3-RELEASE before p14 Description: A programming error...

FreeBSD-SA-20:27.ure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:27.ure Security Advisory The FreeBSD Project Topic: ure device driver susceptible to packet-in-packet attack Category: core Module: ure Announced: 2020-09-15...

FreeBSD -- ure device driver susceptible to packet-in-packet attack

Problem Description: A programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes. An adversary can exploit this to cause the driver to misinterpret...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1382)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...

Buffer Overflow Vulnerability in Multiple Realtek Products

Realtek RTL8195AM and others are an IoT microcontroller from Realtek Semiconductor Taiwan, China. A buffer overflow vulnerability exists in several Realtek products. A remote attacker can exploit this vulnerability to execute arbitrary code on a system with the help of specially crafted EAPOL-Key...

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

Stack overflow

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

CVE-2020-9395

CVE-2020-9395 affects Realtek RTL8195AM/RTL8711AM/RTL8711AF/RTL8710AF before 2.0.6. The issue is a stack-based buffer overflow in the client code handling WPA2’s 4-way handshake via a malformed EAPOL-Key packet with a long keydata buffer. Affected devices can be compromised by proximity to the AP...

PT-2020-20632

Name of the Vulnerable Software and Affected Versions Realtek RTL8195AM versions prior to 2.0.6 Realtek RTL8711AM versions prior to 2.0.6 Realtek RTL8711AF versions prior to 2.0.6 Realtek RTL8710AF versions prior to 2.0.6 Description A stack-based buffer overflow issue exists in the client code...

CVE-2020-9395: Out-of-bounds Write

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

CVE-2020-12773

A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool...

Security feature bypass

A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool...

CVE-2020-12773 Realtek ADSL/PON Modem SoC - Security Misconfiguration

A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool...

CVE-2020-12773

The CVE concerns Realtek ADSL/PON Modem SoC firmware SDK with a security misconfiguration that allows remote command execution via a built-in network monitoring tool. An attacker can exploit a default password to gain arbitrary command execution, compromising confidentiality, integrity, and avail...

PT-2020-13256

Name of the Vulnerable Software and Affected Versions Realtek ADSL/PON Modem SoC firmware affected versions not specified Description A security misconfiguration issue exists in the SDK of some Realtek ADSL/PON Modem SoC firmware. This issue allows attackers to execute arbitrary commands remotely...