131 matches found
CVE-2022-34146
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...
Input validation
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...
CVE-2022-34146 Improper input validation in WLAN Host
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...
CVE-2022-34146 Improper input validation in WLAN Host
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...
CVE-2022-34146
Summary (CVE-2022-34146) A Qualcomm WLAN/host component vulnerability causing a transient Denial-of-Service during defragmentation when parsing frames, due to improper input validation in the WLAN Host. Concrete details across connected sources identify the issue as a DoS caused by input validati...
PT-2023-13344 · Wlan Host · Wlan Host
Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient DOS caused by improper input validation in the WLAN Host while parsing a frame during defragmentation. Recommendations: At the moment, there is no...
GSD-2022-1002564 f2fs: fix to tag gcing flag on page during file defragment
f2fs: fix to tag gcing flag on page during file defragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
SUSE: Security Advisory (SUSE-SU-2022:2058-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm in the U-Boot loader for embedded Linux-based operating systems allows a hacker to rewrite metadata and gain access to the operating system under the identity of a user.
The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems is related to errors in processing input data and the possibility of writing beyond the buffer boundaries. Exploiting...
The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems allows a hacker to cause a service failure.
The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious...
Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices
Cybersecurity researchers have disclosed two unpatched security vulnerabilities in the open-source U-Boot boot loader. The issues, which were uncovered in the IP defragmentation algorithm implemented in U-Boot by NCC Group, could be abused to achieve arbitrary out-of-bounds write and...
PT-2022-2809 · Unknown +4 · Das U-Boot +4
Name of the Vulnerable Software and Affected Versions: Das U-Boot version 2022.01 Description: The issue is related to a buffer overflow in the CONFIG IP DEFRAG function, which is responsible for IP packet defragmentation in the U-Boot bootloader for Linux-based embedded operating systems. This...
PT-2022-2808
Name of the Vulnerable Software and Affected Versions U-Boot version 2022.01 Description The issue is related to a buffer overflow in the CONFIG IP DEFRAG function, which is responsible for IP packet defragmentation in U-Boot bootloaders for Linux-based embedded operating systems. This is caused ...
kernel: reassembling mixed encrypted/plaintext fragments
A flaw was found in ieee80211rxhdefragment in net/mac80211/rx.c in the Linux Kernel's WiFi implementation. This vulnerability can be abused to inject packets or exfiltrate selected fragments when another device sends fragmented frames, and the WEP, CCMP, or GCMP data-confidentiality protocol is...
IPv4 Defragmentation Evasion
Suricata is vulnerable to IPv4 defragmentation evasion. A lack of validation in the IP protocol during fragment matching results in IPv4 defragmentation evasion and could potentially allow an attacker to bypass access controls...
Debian DLA-1603-1 : suricata security update
Several issues were found in suricata, an intrusion detection and prevention tool. CVE-2017-7177 Suricata has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. CVE-2017-15377 It was possible to trigger lots of redundant checks on the...
Heap overflow
An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the maxframesize setting instead of being checked against the bufsize. The maxframesize only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the...
How to Defragment a PVS vDisk with minimum downtime
The purpose of this guide is to instruct a PVS Administrator on the quickest way to perform a defragmentation process on a vDisk, while minimizing the amount of downtime incurred for the PVS Targets. It is important to note that, while this process can be performed without having to Power Down th...
