1511 matches found
CVE-2020-9087
Taurus-AL00A version 10.0.0.1C00E1R1P1 has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak...
CVE-2020-9087
Taurus-AL00A version 10.0.0.1C00E1R1P1 has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak...
Out-of-bounds
Taurus-AL00A version 10.0.0.1C00E1R1P1 has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak...
CVE-2020-9087
Taurus-AL00A version 10.0.0.1C00E1R1P1 has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak...
CVE-2020-9087
CVE-2020-9087 affects Huawei Taurus-AL00A smartphones (version 10.0.0.1, build C00E1R1P1). The vulnerability is an out-of-bounds read in the XFRM module caused by insufficient parameter validation, allowing an authenticated, local attacker to trigger an information leak. Documents consistently de...
Security Advisory - Out-of-Bounds Read Vulnerability in Some Huawei Smart Phone
There is an out-of-bounds read vulnerability in XFRM module of some Huawei smart phone. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak. Vulnerabilit...
CVE-2019-14053
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...
Stack overflow
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...
CVE-2019-14053
CVE-2019-14053 involves a stack out-of-bounds read when creating a new XFRM policy if the template mode does not map to a valid XFRM mode in Qualcomm Snapdragon-based platforms (e.g., Snapdragon Auto/Compute and other Snapdragon family devices). Affected component is the kernel/network/XFRM logic...
CVE-2019-14053
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...
kernel: out-of-bounds array access in __xfrm_policy_unlink
A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...
CVE-2019-15666
A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...
The vulnerability of the __xfrm_policy_unlink component in Linux operating system kernels allows a attacker to trigger a service failure.
The vulnerability of the xfrmpolicyunlink component in Linux operating systems is related to the operation of reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
kernel: Out-of-bounds heap access in xfrm
Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation...
kernel: out-of-bounds array access in __xfrm_policy_unlink
A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...
kernel: out-of-bounds array access in __xfrm_policy_unlink
A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...
CVE-2017-7184
Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation...
DEBIAN-CVE-2019-15666
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in xfrmpolicyunlink, which will cause denial of service, because verifynewpolicyinfo in net/xfrm/xfrmuser.c mishandles directory validation...
UBUNTU-CVE-2019-15666
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in xfrmpolicyunlink, which will cause denial of service, because verifynewpolicyinfo in net/xfrm/xfrmuser.c mishandles directory validation...
The vulnerability of the Linux operating system’s kernel lies in the improper handling of a certain interaction between XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets. This allows an attacker to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper handling of a certain interaction between XFRM Netlink messages, IPPROTOAH packets, and IPPROTOIP packets. Exploiting this vulnerability can allow an attacker to cause a service failure...