CVE-2024-52802 RIOT-OS missing dhcpv6_opt_t minimum header length check

RIOT is an operating system for internet of things IoT devices. In version 2024.04 and prior, the function parseadvertise, located in /sys/net/applicationlayer/dhcpv6/client.c, has no minimum header length check for dhcpv6optt after processing dhcpv6msgt. This omission could lead to an out-of-bou...

CVE-2024-52802

RIOT-OS CVE-2024-52802 affects RIOT 2024.04 and prior, where _parse_advertise and its caller _preparse_advertise in sys/net/application_layer/dhcpv6/client.c lack a minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t, enabling an out-of-bounds read and causing system incons...

CVE-2024-52802

RIOT is an operating system for internet of things IoT devices. In version 2024.04 and prior, the function "parseadvertise", located in "/sys/net/applicationlayer/dhcpv6/client.c", has no minimum header length check for "dhcpv6optt" after processing "dhcpv6msgt". This omission could lead to an...

CVE-2021-30299

Possible out of bound access in audio module due to lack of validation of user provided input...

CVE-2021-30299 Improper Input Validation in Audio

Possible out of bound access in audio module due to lack of validation of user provided input...

CVE-2021-30299 Improper Input Validation in Audio

Possible out of bound access in audio module due to lack of validation of user provided input...

CVE-2024-52802: Improper Input Validation

RIOT is an operating system for internet of things IoT devices. In version 2024.04 and prior, the function parseadvertise, located in /sys/net/applicationlayer/dhcpv6/client.c, has no minimum header length check for dhcpv6optt after processing dhcpv6msgt. This omission could lead to an out-of-bou...

CVE-2021-30299: Improper Input Validation

Possible out of bound access in audio module due to lack of validation of user provided input...

CVE-2018-9341

In impeg2dmcfullxfully of impeg2dmc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-53082

In the Linux kernel, the following vulnerability has been resolved: virtionet: Add hashkeylength check Add hashkeylength check in virtnetprobe to avoid possible out of bound errors when setting/reading the hash key...

AZL-53891 CVE-2024-53055 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...

CVE-2024-53082

CVE-2024-53082: Linux kernel virtio_net vulnerability resolved by adding a hash_key_length check in virtnet_probe() to prevent possible out-of-bounds errors when setting/reading the hash key. This root cause and fix are echoed in connected documents (Astra Linux bulletin and IBM/Red Hat–style pag...

CVE-2024-53082 virtio_net: Add hash_key_length check

In the Linux kernel, the following vulnerability has been resolved: virtionet: Add hashkeylength check Add hashkeylength check in virtnetprobe to avoid possible out of bound errors when setting/reading the hash key...

CVE-2024-53055 wifi: iwlwifi: mvm: fix 6 GHz scan construction

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...

GHSA-JP37-5QHW-MFFW Sharks has a Bias of Polynomial Coefficients in Secret Sharing

Affected versions of this crate allowed for a bias when generating random polynomials for Shamir Secret Sharing, where instead of being within the range 0, 255 they were instead in the range 1, 255. A description from Cure53, who originally found the issue, is available: The correct method to...

CVE-2024-42385

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

PT-2024-40350 · Blahaj +1 · Blahaj +1

Name of the Vulnerable Software and Affected Versions: sharks crate affected versions not specified Description: The issue concerns a bias in generating random polynomials for Shamir Secret Sharing. Instead of coefficients being in the range 0, 255, they were in the range 1, 255. This allows an...