7371 matches found
Asus RT-AX82U cfg_server cm_processConnDiagPktList denial of service vulnerability
Talos Vulnerability Report TALOS-2022-1592 Asus RT-AX82U cfgserver cmprocessConnDiagPktList denial of service vulnerability January 10, 2023 CVE Number CVE-2022-38393 SUMMARY A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U...
K41440465: BIG-IP TMM vulnerability CVE-2022-26071
Security Advisory Description A flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. CVE-2022-26071 Impact A...
Buffer overflow
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...
CVE-2022-47949
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...
CVE-2022-47949
Summary of CVE-2022-47949 (ENLBufferPwn) : The vulnerability stems from the Nintendo NetworkBuffer class used by Animal Crossing: New Horizons and other Nintendo titles. The two methods, Set and Add, do not validate that incoming data fits the allocated buffer (dataSize), enabling a remote attack...
PT-2022-28095 · Nintendo · Nintendo Switch Sports +9
Name of the Vulnerable Software and Affected Versions: Animal Crossing: New Horizons versions prior to 2.0.6 Mario Kart 7 versions prior to 1.2 Mario Kart 8 Deluxe versions prior to 2.1.0 ARMS versions prior to 5.4.1 Splatoon 2 versions prior to 5.5.1 Splatoon 3 versions prior to late 2022 Super...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47517
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...
Heap overflow
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...
Code injection
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
UBUNTU-CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47517
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
PT-2022-28069
Name of the Vulnerable Software and Affected Versions drachtio-server versions prior to 0.8.20 Description An issue in the libsofia-sip fork allows remote attackers to cause a denial of service via a crafted UDP message, leading to a daemon crash due to a failure in the...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47516
CVE-2022-47516 affects the Sofia-SIP library (libsofia-sip fork) used by drachtio-server prior to 0.8.20. The vulnerability allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that triggers a self-assertion failure in libsofia-sip-ua/tport/tport.c. Relate...
PT-2022-28070 · Unknown · Drachtio-Server
Name of the Vulnerable Software and Affected Versions: drachtio-server versions prior to 0.8.19 Description: An issue in the libsofia-sip fork allows remote attackers to cause a denial of service via a crafted UDP message, resulting in a heap-based buffer over-read due to an off-by-one error. Thi...