10133 matches found
BIT-NODE-2024-27983
An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a T...
CVE-2023-43537
Information disclosure while handling T2LM Action Frame in WLAN Host...
CVE-2024-23363 Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...
CVE-2024-23363 Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...
CVE-2023-43537 Buffer Over-read in WLAN Host
Information disclosure while handling T2LM Action Frame in WLAN Host...
CVE-2023-43537 Buffer Over-read in WLAN Host
Information disclosure while handling T2LM Action Frame in WLAN Host...
CVE-2023-43537: Buffer Over-read
Information disclosure while handling T2LM Action Frame in WLAN Host...
PT-2024-19842 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to a Transient DOS that occurs while processing an improperly formatted Fine Time Measurement FTM management frame. This can cause a DOS attack via malformed FTM frames...
PT-2024-13110 · Qualcomm · Qualcomm Snapdragon Auto
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to information disclosure while handling T2LM Action Frame in WLAN Host. Recommendations: At the moment, there is no information about a newer version...
CVE-2024-23363: Buffer Over-read
Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...
kernel: net: bridge: data races indata-races in br_handle_frame_finish()
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEVSTATSINC syzbot/KCSAN reported data-races in brhandleframefinish 1 This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEVSTATSINC to update dev-stats fields. Handles updates to...
kernel: net: bridge: data races indata-races in br_handle_frame_finish()
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEVSTATSINC syzbot/KCSAN reported data-races in brhandleframefinish 1 This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEVSTATSINC to update dev-stats fields. Handles updates to...
SUSE CVE-2024-36016
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds in gsm0receive Assuming the following: - side A configures the ngsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - side A switches to advance...
Linux kernel rtl8192e Memory Leak
The vulnerability of the rtl8192e driver in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability allows an attacker to trigger a memory leak by using an 802.11 Authentication Frame with a status field that...
Linux kernel rtl8192u Memory Leak
The vulnerability of the rtl8192u driver in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability allows an attacker to trigger a memory leak by using an 802.11 type Authentication frame with a status field tha...
CVE-2024-36016
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds in gsm0receive Assuming the following: - side A configures the ngsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - side A switches to advance...
Medium: cni-plugins
Issue Overview: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...
Linux kernel macvlan_handle_frame() Buffer Overflow DoS
The vulnerability of the macvlanhandleframe function in the drivers/net/macvlan.c file of the Linux kernel’s networking component is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2023-6349 Heap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above...
CVE-2023-6349: Heap-based Buffer Overflow
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above...