10076 matches found
kernel: virtio-net: tun: mlx5_core short frame denial of service
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling
A flaw was found in the Linux kernel. A frame buffer can be freed while still in use in a specific situation in drivers/gpu/drm/drmplane.c. This issue may compromise the availability...
exempli utility DoS
The vulnerability of the ID3Support::ID3v2Frame::getFrameValue function in the exempli utility is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2024-33050
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
CVE-2024-23364
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...
CVE-2024-33051
CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...
CVE-2024-33050 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
CVE-2024-33048 Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...
CVE-2024-33048 Buffer Over-read in WLAN Host
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...
CVE-2024-23364
The CVE-2024-23364 issue is a Transient DoS in WLAN where processing of non-transmitted BSSID profile sub-elements in the MBSSID Information Element (IE) of OTA beacon frames can cause Denial-of-Service. Public sources indicate this vulnerability concerns Qualcomm WLAN firmware components and rel...
CVE-2024-23364 Buffer Over-read in WLAN Firmware
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...
CVE-2024-33050: Buffer Over-read
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
PT-2024-19843
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions up to XR2+ Gen 1 Description A transient Denial of Service DOS can occur when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that i...
CVE-2024-33048: Buffer Over-read
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...
PT-2024-25094
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A Transient Denial of Service DOS issue occurs when processing the TIM IE from a beacon frame due to the lack of a length check for the IE. This results i...
CVE-2024-23364: Buffer Over-read
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...
CVE-2024-33051: Buffer Over-read
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length...
Android Open Source Platform (AOSP) Browser UXSS
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Open Source Platform AOSP Browser UXSS', 'Description' = %q This module exploits a Universal Cross-Site Scripting UXSS vulnerability...
OESA-2024-2075 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A vulnerability was fou...