EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-1688)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in...

EulerOS Virtualization for ARM 64 3.0.6.0 : gnupg2 (EulerOS-SA-2020-1706)

According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An...

PT-2020-6633 · Arm +2 · Mbed Tls +2

Name of the Vulnerable Software and Affected Versions: Arm Mbed TLS versions prior to 2.23.0 Description: A side channel issue allows the recovery of an ECC private key. This is related to functions such as mbedtls ecp check pub priv, mbedtls pk parse key, mbedtls pk parse keyfile, mbedtls ecp mu...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20266)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20267)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS Denial of Service Vulnerability

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A security vulnerability exists in the CoAP library parser in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS CoAP library input validation error vulnerability (CNVD-2021-20270)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. An input validation error vulnerability exists in the CoAP library in ARM Mbed OS version...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20269)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12885

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...

CVE-2020-12885

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...

CVE-2020-12884

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

CVE-2020-12883

Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr ...

CVE-2020-12883

Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr ...

CVE-2020-12884

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

Integer overflow

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

Buffer overflow

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

Heap overflow

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...