[SECURITY] [DLA 3356-1] wireless-regdb security update

Debian LTS Advisory DLA-3356-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost March 09, 2023 https://wiki.debian.org/LTS Package : wireless-regdb Version : 2022.04.08-2deb10u1 CVE ID : n/a Debian Bug : This update the wireless regulatory database to version...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2023-1507)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernels filesystem sub-component. This flaw allows a local attacker...

DLA-3356-1 wireless-regdb - security update

Bulletin has no description...

Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5938-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5938-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...

Debian: Security Advisory (DLA-785)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-13819 · Qualcomm · Snapdragon +68

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN component when sending a packet to a device. Recommendations: At the moment, there is ...

PT-2023-13814 · Qualcomm · Snapdragon +171

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in WLAN due to an integer overflow leading to a buffer overflow during the initialization phase. No information is...

PT-2023-13258 · Qualcomm · Snapdragon +64

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to memory corruption in the WLAN component due to a use-after-free condition. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-13812 · Qualcomm · Snapdragon +95

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS caused by a reachable assertion in WLAN while processing PEER ID populated by TQM...

PT-2023-13815 · Qualcomm · Snapdragon +256

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in WLAN due to an incorrect type cast while sending the WMI SCAN SCH PRIO TBL CMDID message. Recommendations: ...

Denial Of Service (DoS)

Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to the missing offset validation in hif.c in the WILC1000 wireless driver which can trigger an out-of-bounds read when parsing a Robust Security Network RSN information element from a Netlink packet...

Binary vulnerability in TOTOLINK T8 (CNVD-2023-30416)

The TOTOLINK T8 is a wireless dual-band router. A binary vulnerability exists in TOTOLINK T8, which can be exploited by attackers to cause arbitrary code execution...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5911-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5911-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5912-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5912-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state i...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5913-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5913-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state i...

USN-5919-1 linux-aws-hwe, linux-oracle vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

The vulnerability of the brcmf_cfg80211_mgmt_tx function in the Linux kernel’s drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c file allows a hacker to cause system failures or gain increased privileges.

The vulnerability of the brcmfcfg80211mgmttx function in the Linux kernel’s drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c file is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause system failures or gain increased privileges...

CVE-2023-24122

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the ssid5g parameter at /goform/WifiBasicSet...

Jensen of Scandinavia Eagle 1200AC 缓冲区错误漏洞

Jensen of Scandinavia Eagle 1200AC is a router from Jensen. A security vulnerability exists in the Jensen of Scandinavia Eagle 1200AC version V15.03.06.33en that stems from a heap-based buffer overflow discovered in the security5g parameter of the /goform/WifiBasicSet page...

PT-2023-20761 · Abus · Abus Tvip 20000-21150

Name of the Vulnerable Software and Affected Versions: ABUS TVIP 20000-21150 devices Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in the "/cgi-bin/mft/wireless mft" ap field. This enables attackers to potentially gain control over the device...