5271 matches found
edk2: Buffer overflow in the DHCPv6 client via a long Server ID option
A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...
edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...
Vulnerability in the functions br_handle_frame_finish() and deliver_clone() of the networking component of the Linux operating system, allowing a hacker to trigger a service failure
The vulnerability of the network component of the Linux operating system’s kernel is related to incorrect synchronization when increasing counters in the functions brhandleframefinish and deliverclone in the net/bridge/brforward.c module. Exploiting this vulnerability can allow a remote attacker ...
The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.
The vulnerability of the sub41D354 function in D-Link DIR-823G router’s microprogramming system is related to the issue where the operation’s output escapes the buffer in memory when processing the soapaction parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the kvm_for_each_vcpu() function in the KVM virtualization subsystem of Linux kernels allows a attacker to cause a service failure.
The vulnerability of the kvmforeachvcpu function in the KVM virtualization subsystem of Linux operating systems is related to errors in pointer manipulation when processing the createdvcpus parameter. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...
The vulnerability of the memblock_free_late function in the ima component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the memblockfreelate function in the ima component of the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system, related to memory release errors, allows a attacker to cause a service failure.
The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Microsoft .NET software platform, related to pointer swapping errors, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft .NET software platform is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the run() function in the FreeIPA server’s script allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the run function in the ipautil.py script of the FreeIPA server is related to insufficient validation of input data during session establishment when processing the user parameter /sip/session/loginpassword. Exploiting this vulnerability can allow a malicious actor to gain...
CVE-2023-48674
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function...
Commend WS203VICM Parameter Injection Vulnerability
The Commend WS203VICM is a vandalism prevention station with a camera and call button from Commend. The Commend WS203VICM suffers from a parameter injection vulnerability that originates from a vulnerability that allows an unauthenticated, remote attacker to send a crafted message to the web serv...
mosquitto: memory leak leads to unresponsive broker
A memory leak vulnerability was found in Eclipse Mosquitto. This issue is triggered by malicious initial packets or certain client actions and may allow a remote attacker to the deplete system resources causing memory exhaustion, leading to a disruption in services and a denial of service conditi...
The vulnerability of the pci_dev_for_each_resource() function in the Linux operating system’s PCI kernel component allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of the pcidevforeachresource function in the Linux operating system’s PCI core component is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause...
The vulnerability of the `format_fractional_part_nsecs` function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the formatfractionalpartnsecs function in the Wireshark network traffic analyzer is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
edk2: Buffer overflow in the DHCPv6 client via a long Server ID option
A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...
The vulnerability of the dissect_bgp_open() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the dissectbgpopen function in the Wireshark network traffic analyzer is related to the operation that occurs outside the buffer in memory when processing extended BGP parameter formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the ubi_attach() function in the UBI driver for Linux operating systems allows a hacker to cause a service failure or exert other effects.
The vulnerability of the ubiattach function in the UBI Unsorted Block Images driver for the Linux operating system is related to a memory leak caused by the lack of releasing the kobj-name variable in the drivers/mtd/ubi/attach.c file. Exploiting this vulnerability can allow an attacker to cause ...
AT&T Outage Disrupts Service for Millions of Users Across US
By Waqas You are not alone, an AT&T outage is happening across the United States, and the company is working… This is a post from HackRead.com Read the original post: AT&T Outage Disrupts Service for Millions of Users Across US...
The vulnerability of the XML syntax analyzer library libexpat, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the XML syntax analyzer library libexpat is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability in the `src/video/SDL_pixels.c` component of the Simple DirectMedia Layer library allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the src/video/SDLpixels.c file of the Simple DirectMedia Layer library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures due to the...