107 matches found
PT-2025-37654
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A slab-out-of-bounds read vulnerability exists in the brcmfmac module within the Linux kernel. This issue occurs in the brcmf get assoc ies function when handling data from a USB devic...
The vulnerability of the ath12k_station_assoc() function in the Atheros/Qualcomm wireless communication adapter support driver for Linux operating systems allows a hacker to induce a service failure.
The vulnerability of the ath12kstationassoc function in the Atheros/Qualcomm wireless adapter support driver for Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-5194
A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoctable.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been...
CVE-2023-33082
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2024-33026
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...
CVE-2024-38397
Transient DOS while parsing probe response and assoc response frame...
CVE-2024-38397 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame...
CVE-2024-38397 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame...
CVE-2024-38397
CVE-2024-38397 describes a transient denial-of-service in Qualcomm WLAN chipsets during parsing probe response and association response frames. Affected component is Qualcomm embedded/wireless chipset software handling WLAN host communications. Root cause is a parsing/buffer issue (buffer over-re...
Wiz joins the Microsoft Intelligent Security Association
Wiz collaborates with Microsoft on the quest to make the cloud more secure for everyone...
CVE-2024-33026
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...
CVE-2024-33026
CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...
CVE-2024-33026 Buffer Over-read in WLAN Host
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...
SUSE CVE-2024-40952
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2journaldirty bdev-bdsuper has been removed and commit 8887b94d9322 change the usage from bdev-bdsuper to bassocmap-host-isb. This introduces the following NULL pointer dereference in...
DEBIAN-CVE-2024-40952
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2journaldirty bdev-bdsuper has been removed and commit 8887b94d9322 change the usage from bdev-bdsuper to bassocmap-host-isb. This introduces the following NULL pointer dereference in...
kernel: keys: Fix linking a duplicate key to a keyring's assoc_array
A race condition was found in the Linux kernel's keyring subsystem. When concurrent DNS queries resolve the same hostname, a duplicate index key can be created in the keyring's assocarray. The assocarray implementation has a BUGON check that detects this invalid state, causing a kernel crash. Thi...
Arris VAP2500 命令注入漏洞
The Arris VAP2500 is a wireless video access point device from Arris USA. A command injection vulnerability exists in the Arris VAP2500 version 08.50, which stems from the fact that manipulation of the parameter id in the file /assoctable.php can lead to command injection...
kernel: keys: Fix linking a duplicate key to a keyring's assoc_array
A race condition was found in the Linux kernel's keyring subsystem. When concurrent DNS queries resolve the same hostname, a duplicate index key can be created in the keyring's assocarray. The assocarray implementation has a BUGON check that detects this invalid state, causing a kernel crash. Thi...
