EUVD-2024-48027

Malicious code in bioql PyPI...

CVE-2024-7322

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service DoS. To recover from this DoS, the network must be re-established...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in zbee_sec_ccm_decrypt

Detailed Report: https://oss-fuzz.com/testcase?key=5415183615328256 Project: wireshark Fuzzing Engine: honggfuzz Fuzz Target: fuzzsharkipproto-udp Job Type: honggfuzzasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x5030004d4478 Crash State: zbeesecccmdecry...

ZigBee Security Research Toolkit: KillerBee

KillerBee framework is a tool for attacking ZigBee and IEEE 802.15.4 networks. KillerBee is designed to simplify the process of sniffing packets from the air interface or a supported packet capture file libpcap or Daintree SNA, and for injecting arbitrary packets. Helper functions including IEEE...

wireshark: ZigBee dissector crash (wnpa-sec-2015-24)

The dissectzbeesecure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service application crash via a crafted packet...