222 matches found
hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.
...
QEMU Buffer Overflow Vulnerability (CNVD-2020-44638)
QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/net/xgmac.c file in the XGMAC Ethernet controller in versions prior to QEMU...
Buffer overflow
hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial o...
UBUNTU-CVE-2020-15863
hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial o...
CVE-2020-15863
hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial o...
CVE-2020-15863
CVE-2020-15863 affects QEMU pre-07-20-2020, in the XGMAC Ethernet controller (hw/net/xgmac.c). A buffer overflow during packet transmission can allow a guest user/process to crash the QEMU host process, yielding denial of service or potential privilege escalation, specifically impacting the highb...
PT-2020-5186
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 07-20-2020 Description The issue is related to a buffer overflow in the XGMAC Ethernet controller, specifically in the xgmac enet send function. This occurs during packet transmission and affects the highbank and midway...
USN-4300-1: Linux kernel vulnerabilities
It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations could miss deferred TLB flushes or otherwise mishandle them. An attacker in a guest VM could use this to expose sensitive information read memor...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4300-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4300-1 advisory. It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations...
The vulnerability of Intel Ethernet Series 700 controller microprogramming software, related to deficiencies in handling exceptional states, allows a intruder to trigger a service failure.
The vulnerability of Intel Ethernet Controller Series 700 microprogramming software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
Security Bulletin: Vulnerability in Intel Ethernet Controller XL710 affects IBM MQ Appliance
Summary A vulnerability in the Intel Ethernet Controller XL710 affects IBM MQ Appliance M2001. Vulnerability Details CVEID: CVE-2016-8106 DESCRIPTION: Intel Ethernet Controller X710/XL710 is vulnerable to a denial of service, caused by improper handling of certain network traffic. By sending...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user with the CAPSYSRAWIO capability inside a guest could use this flaw to crash the host...
Denial of service
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.1813 and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMPDESC or SNMPLOCSNMPCONT field...
CVE-2018-16210
WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.1813 and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMPDESC or SNMPLOCSNMPCONT field...
CVE-2018-16210
Affected products: WAGO 750-88X and 750-89X Ethernet Controller devices, versions 01.09.18(13) and earlier. Vulnerability: Cross-site scripting (XSS) in the SNMP configuration via webserv/cplcfg/snmp.ssi, specifically SNMP_DESC or SNMP_LOC_SNMP_CONT fields. Root cause/impact: XSS could allow inje...
WAGO 750-881 01.09.18 - Cross-Site Scripting
WAGO 750-881 01.09.18 - Cross-Site Scripting Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Date: 2018-08-30 Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N...
WAGO 750-881 01.09.18 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting Exploit Author: SecuNinja @secuninja Vendor Homepage: wago.com Version: 01.09.1813 and earlier Affected Products: Ethernet Controller 750-881 - 01.09.1813, 01.08.01 10 CVE : N/A...
Security Bulletin: A vulnerability has been discovered in 40-GbE network interface modules for the IBM Security Network Protection XGS 7100 appliance (CVE-2016-8106)
Summary A denial of service vulnerability CVE-2016-8106 has been discovered in 40-GbE network interface modules for the IBM Security Network Protection XGS 7100 appliance. Vulnerability Details CVEID: CVE-2016-8106 DESCRIPTION: Intel Ethernet Controller X710/XL710 is vulnerable to a denial of...
