13091 matches found
CVE-2024-41072 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check whether number of channels passed via 'ioctlsock, SIOCSIWSCAN, ...' doesn't exceed IWMAXFREQUENCIES and reject invalid request with...
CVE-2024-41072 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check whether number of channels passed via 'ioctlsock, SIOCSIWSCAN, ...' doesn't exceed IWMAXFREQUENCIES and reject invalid request with...
CVE-2024-41072
CVE-2024-41072 affects the Linux kernel wifi subsystem (cfg80211 wext). The fix adds an extra validation in cfg80211_wext_siwscan() to ensure the number of channels passed via ioct(SIOCSIWSCAN, ...) does not exceed IW_MAX_FREQUENCIES; requests that exceed this limit are rejected with -EINVAL. Thi...
CVE-2024-41072 wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check whether number of channels passed via 'ioctlsock, SIOCSIWSCAN, ...' doesn't exceed IWMAXFREQUENCIES and reject invalid request with...
CVE-2024-41071
CVE-2024-41071 is rejected/not used per initial description; does not represent an active vulnerability entry.
TOTOLINK A3600R 安全漏洞
TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the comment parameter in the setWiFiAclAddConfig function of the /cgi-bin/cstecgi.cgi file that fails to correctly...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system from Apple Inc. developed for Mac computers. A security vulnerability exists in Apple macOS versions prior to Sonoma 14, which stems from a possible failure to remove a Wi-Fi password when activating a Mac in macOS Recovery...
CVE-2024-41689
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WP...
SUSE CVE-2024-40930
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate HE operation element parsing Validate that the HE operation element has the correct length before parsing it...
The vulnerability of the HTTP-server of the microprogrammed Wi-Fi range extension software from Actiontec, the WCB6200Q, allows a hacker to execute arbitrary code.
The vulnerability of the HTTP-server of the microprogrammed Wi-Fi extension software from Actiontec, WCB6200Q, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CentOS 7 : linux-firmware (RHSA-2024:3939)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3939 advisory. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation ...
openSUSE Security Advisory (SUSE-SU-2024:2575-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
kernel: wifi: mac80211: fix potential key use-after-free
A use-after-free flaw was found in the Linux kernel’s IEEE 802.11 networking stack implementation functionality, used by Wifi, in how a user triggers the error path of the ieee80211gtkrekeyadd function. This flaw allows a local user to crash the system...
kernel: wifi: cfg80211: check A-MSDU format more carefully
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...
SUSE SLED15: kernel-firmware / kernel-firmware-all / kernel-firmware-amdgpu / etc (SUSE-SU-2024:2575-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2575-1 advisory. - CVE-2023-38417: Fixed improper input validation for some IntelR PROSet/Wireless WiFi software...
July 23, 2024—KB5040525 (OS Build 19045.4717) Preview
None None...
The vulnerability of microprogrammed network devices from Google Nest Wifi, related to the occurrence of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogrammed network devices from Google Nest Wifi relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Tenda AC18 Stack Buffer Overflow Vulnerability
Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a stack buffer overflow vulnerability, which stems from the discovery of a deviceMac parameter via ip/goform/addWifiMacFilter...