Tenda W9 SetWrlAccessList Code Execution

The vulnerability of the setWrlAccessList function in the wireless access point software Tenda W9 involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2024-40421 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: ckb affected versions not specified Description: The issue arises from multiple type conversions in ckb that unsafely cast between byte pointers and other types of pointers, resulting in unaligned pointers. This is considered undefined behavi...

Tenda AC10U saveParentControlInfo Data Compromise

The vulnerability of the saveParentControlInfo function in the Tenda AC10U router’s microprogramming software relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

Tenda AC10U fromAddressNat Buffer Overflow

The vulnerability of the fromAddressNat function in the Tenda AC10U router’s microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of th...

formQuickIndex Function Tenda AC10U Data Compromise

The vulnerability of the formQuickIndex function in the microprogramming software for Tenda AC10U relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Tenda AC10U formSetVirtualSer Buffer Overflow

The vulnerability of the formSetVirtualSer function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

Tenda AC10U fromNatStaticSetting Buffer Overflow

The vulnerability of the fromNatStaticSetting function in the Tenda AC10U router’s microprogramming software relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Tenda AC10U fromDhcpListClient Buffer Overflow

The vulnerability of the fromDhcpListClient function in the Tenda AC10U router’s software relates to the reading of data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Tenda i6 httpd Form Wifi Mac Filter Get Buffer Overflow

The vulnerability of the formWifiMacFilterGet function in the httpd daemon of the microprogrammed wireless access points from Tenda i6 is related to the operation that goes beyond the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow an attacker to...

Qualcomm Heap Buffer Overflow RCE

The vulnerability of embedded Qualcomm software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

RHEL 8 : squid:4 (RHSA-2024:0397)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0397 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

ImageIO Disclosure Protected Information

The vulnerability of the ImageIO component in iOS, tvOS, macOS, watchOS, and iPadOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2021-42147

Buffer over-read vulnerability in the dtlssha256update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet...

CVE-2021-42144

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtlsccmdecryptmessage...

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

php: Password_verify() always return true with some hash

A vulnerability was found in PHP. This security flaw occurs when malformatted BCrypt hashes that include a $ within their salt part trigger a buffer overread and may erroneously validate any password as valid...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Squid vulnerabilities (USN-6594-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6594-1 advisory. Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this...

Linux SMB Receive Encrypted Standard Buffer Overflow DoS

The vulnerability of the receiveencryptedstandard function in the fs/smb/client/smb2ops.c module, which is part of the SMB protocol client implementation in Linux operating systems, relates to access to memory beyond the allocated buffer due to a numerical overflow. Exploiting this vulnerability...

PT-2024-3791 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a function in the Linux kernel's implementation of the Reliable Datagram Sockets RDS protocol. It involves reading memory beyond the allocated buffer, potential...

OESA-2024-1086 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause...