10134 matches found
PT-2024-7692
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds fix in the riscv component of the Linux kernel, specifically in the Sparse-Memory/vmemmap. The vulnerability can cause a denial of service. The...
SUSE-SU-2024:0517-1 Security update for libaom
This update for libaom fixes the following issues: - CVE-2023-6879: Fixed a heap buffer overflow when increasing the video frame resolution bsc1218429...
CVE-2022-23088
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
Heap overflow
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2022-23088: Improper Control of Generation of Code
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2023-48229 Out-of-bounds write in the radio driver for Contiki-NG nRF platforms
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the readframe function in...
PT-2024-13557 · Unknown · Contiki-Ng
Name of the Vulnerable Software and Affected Versions: Contiki-NG affected versions not specified Description: An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The issue is triggered when parsing radio frames in the read fra...
CVE-2024-25679
In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...
CVE-2024-25679
In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...
CVE-2024-25679
Affected software : PQUIC (open source). Vulnerability : retention of unused initial encryption keys can disrupt a PSK-configured connection by sending a CONNECTION_CLOSE frame encrypted with the initial key computed (pre-5bde5bb). Impact : confidentiality impact HIGH; availability impact LOW; ot...
PQUIC Security Vulnerabilities
PQUIC is a framework for PQUIC open source . Enables QUIC clients and servers to dynamically exchange protocol plug-ins, thereby extending the protocol on a per-connection basis. A security vulnerability exists in versions prior to PQUIC 5bde5bb, which stems from the retention of unused initial...
PT-2024-21087
Name of the Vulnerable Software and Affected Versions PQUIC versions prior to 5bde5bb Description The issue allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as...
CVE-2024-25679
In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTIONCLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation...
VulnCheck KEV: CVE-2013-0213
The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...
kernel: NULL pointer dereference in can_rcv_filter
A NULL pointer dereference issue was found in the can protocol in net/can/afcan.c in the Linux kernel, where mlpriv may not be initialized in the receive path of CAN frames. This flaw allows a local user to crash the system or cause a denial of service...
Authorization
Transient DOS while processing 11AZ RTT management action frame received through OTA...
Design/Logic Flaw
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...
CVE-2023-43534
CVE-2023-43534 describes a memory corruption vulnerability in Qualcomm WLAN chipsets when validating the TID to Link Mapping action request frame during station association to an access point. The attribute scores indicate a network-exposed, high-severity issue with low attack complexity and no u...
CVE-2023-43523
CVE-2023-43523 relates to a transient Denial of Service in Qualcomm WLAN firmware when processing 11AZ RTT management action frames received over OTA. Affected are Qualcomm closed‑source WLAN components; CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, High impact on availa...