CVE-2022-34146

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CLSA-2025-1736469006 Fix of 35 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52664 - net: atlantic: eliminate double free in error handling logic CVE-url: https://ubuntu.com/security/CVE-2023-52698 - calipso: fix memory leak in netlblcalipsoaddpass CVE-url: https://ubuntu.com/security/CVE-2021-47466 - mm, slub: fix potential...

SUSE CVE-2023-52610

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skb leak and crash on ooo frags actct adds skb-users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inetfragreasmprepare skbmorph which is not straightforward. Howev...

UBUNTU-CVE-2023-52610

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skb leak and crash on ooo frags actct adds skb-users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inetfragreasmprepare skbmorph which is not straightforward. Howev...

CVE-2023-52610 net/sched: act_ct: fix skb leak and crash on ooo frags

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skb leak and crash on ooo frags actct adds skb-users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inetfragreasmprepare skbmorph which is not straightforward. Howev...

PT-2024-14652 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7.0-rc3 Description: The Linux kernel has a vulnerability in the net/sched module, specifically in the act ct function. This function adds a reference to the skb socket buffer before defragmentation, which can...

CVE-2023-24821 RIOT-OS vulnerable to Integer Underflow during defragmentation

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write wil...

SUSE CVE-2015-3813

The fragmentaddwork function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service memory consumption vi...

CVE-2022-34146

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

Input validation

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2022-34146 Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2022-34146 Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2022-34146

Summary (CVE-2022-34146) A Qualcomm WLAN/host component vulnerability causing a transient Denial-of-Service during defragmentation when parsing frames, due to improper input validation in the WLAN Host. Concrete details across connected sources identify the issue as a DoS caused by input validati...

PT-2023-13344 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient DOS caused by improper input validation in the WLAN Host while parsing a frame during defragmentation. Recommendations: At the moment, there is no...

GSD-2022-1002564 f2fs: fix to tag gcing flag on page during file defragment

f2fs: fix to tag gcing flag on page during file defragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

SUSE: Security Advisory (SUSE-SU-2022:2058-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems allows a hacker to cause a service failure.

The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious...

The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm in the U-Boot loader for embedded Linux-based operating systems allows a hacker to rewrite metadata and gain access to the operating system under the identity of a user.

The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems is related to errors in processing input data and the possibility of writing beyond the buffer boundaries. Exploiting...

Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices

Cybersecurity researchers have disclosed two unpatched security vulnerabilities in the open-source U-Boot boot loader. The issues, which were uncovered in the IP defragmentation algorithm implemented in U-Boot by NCC Group, could be abused to achieve arbitrary out-of-bounds write and...

PT-2022-2809 · Unknown +4 · Das U-Boot +4

Name of the Vulnerable Software and Affected Versions: Das U-Boot version 2022.01 Description: The issue is related to a buffer overflow in the CONFIG IP DEFRAG function, which is responsible for IP packet defragmentation in the U-Boot bootloader for Linux-based embedded operating systems. This...