The vulnerability of the “SIP ALG” module (SIP Application Layer Gateway) in the Realtek SDK for the eCos operating system allows a hacker to execute arbitrary code.

The vulnerability of the “SIP ALG” module SIP Application Layer Gateway in the Realtek SDK for the eCos operating system is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted UDP packet...

Black Hat and DEF CON Roundup

There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. The week even included a rare Las Vegas fla...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

Stack overflow

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

CVE-2022-27255

CVE-2022-27255 affects Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1. The SIP ALG component that rewrites SDP data has a stack-based buffer overflow, enabling an attacker to remotely execute code without authentication by sending a crafted SIP packet containing malicious SDP data. The NVD metrics ra...

CVE-2022-27255

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...

PT-2022-4237 · Realtek · Realtek Ecos Rsdk +1

Name of the Vulnerable Software and Affected Versions: Realtek eCos RSDK version 1.5.7p1 Realtek MSDK version 4.9.4p1 Description: The SIP ALG function in Realtek eCos RSDK and MSDK has a stack-based buffer overflow that allows an attacker to remotely execute code without authentication via a...

Realtek AP-Router SDK 输入验证错误漏洞

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. The Realtek AP-Router SDK suffers from an input validation error vulnerability that originates from remote code execution via a crafted SIP packet containing malicious SDP data...

GSD-2022-1004496 irqchip/realtek-rtl: Fix refcount leak in map_interrupts

irqchip/realtek-rtl: Fix refcount leak in mapinterrupts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

Command injection

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK (Realtek RTL819x-SDK) is affected by CVE-2022-29558. The issue exists in versions prior to 3.6.1 and stems from insufficient validation of the receive buffer, enabling command injection via the web interface. Affected component: rtl819x-SDK web interface; root cause: inadequat...

PT-2022-19697 · Realtek · Realtek Rtl819X-Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x-SDK versions prior to 3.6.1 Description: The issue allows command injection over the web interface. This can potentially be exploited to execute unauthorized commands on the affected system. Recommendations: For versions prior...

Realtek rtl819x-SDK 命令注入漏洞

Realtek rtl819x-SDK is a new/clean Linux kernel driver/module from Realtek Semiconductor China. It is used for IEEE 802.11 wireless Ethernet adapters based on Realtek's RTL8180L and RTL8185L chipsets. A security vulnerability exists in versions prior to Realtek rtl819x-SDK v3.6.1, which stems fro...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and Networ...