PT-2023-24148 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in WLAN Firmware that occurs while parsing a NAN management frame. Recommendations: At the moment, there is no information...

CVE-2023-44466

An issue was discovered in net/ceph/messengerv2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in cephdecode32...

OESA-2023-1690 exempi security update

Exempi is an implementation of XMP. Version 2.x is based on Adobe XMP SDK and released under a BSD-style license like Adobe's. Security Fixes: Buffer Overflow vulnerability in function ID3Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of...

SUSE-SU-2023:3801-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow bsc1213128. - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow bsc1213131. - CVE-2021-3522: Fixed frame size check and potential invalid reads bsc1185448...

dallinger (7.0.0), flask-frame (>=0.1.2, <=0.4.5) +17 more potentially affected by CVE-2023-41419 via gevent (21.1.2)

gevent PYPI version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - dallinger 7.0.0 - flask-frame =0.1.2, =1.0.4, =13.0.0, =11.1.0, =0.0.5, =11.0.0b13, =11.5.0b1, =2.0.0b1, =0.4.0b10, =1.2.19, =2.0.0a0, =3.0.0rc7 an...

dallinger (7.0.0), flask-frame (>=0.1.2, <=0.4.5) +17 more potentially affected by CVE-2023-41419 via gevent (21.1.2)

gevent PYPI version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - dallinger 7.0.0 - flask-frame =0.1.2, =1.0.4, =13.0.0, =11.1.0, =0.0.5, =11.0.0b13, =11.5.0b1, =2.0.0b1, =0.4.0b10, =1.2.19, =2.0.0a0, =3.0.0rc7 an...

Denial of service in Quinn servers

Receiving QUIC frames containing a frame with unknown frame type could lead to a panic. Unfortunately this is issue was not found by our fuzzing infrastructure. Thanks to the QUIC Tester research group for reporting this issue...

Quinn Input Validation Error Vulnerability

Quinn is a pure Rust, asynchronous-compliant implementation of the IETF QUIC transport protocol from the quinn-rs open source. An input validation error vulnerability exists in quinn-proto that stems from a Denial of Service DoS that occurs when an unknown frame is received in a QUIC packet...

Medium: exempi

Issue Overview: Buffer Overflow vulnerability in function ID3Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. CVE-2020-18651 Affected Packages: exempi Note: This advisory is...

PT-2023-8744

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc1-syzkaller-00236-gad8a69f361b9 Description The vulnerability is related to a data-race condition in the br handle frame finish function, which can run from multiple CPUs without mutual exclusion. This ca...

ffmpeg:ffmpeg_BSF_EVC_FRAME_MERGE_fuzzer: Stack-buffer-overflow in ff_evc_parse_slice_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6092990982258688 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFEVCFRAMEMERGEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address:...

CVE-2023-4956

A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they intend to click on the top-level page. During the pentest, it has been detected that the config-editor page is vulnerab...

PT-2023-8753

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.85-intel-ese-standard-lts Description The vulnerability is related to the skb flow dissect function in the Linux kernel, which incorrectly calculates the nhoff value when a PTP ethernet raw frame with a size...

netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

CVE-2023-40039

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...

Design/Logic Flaw

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...

ARRIS TG852G Security Vulnerability

The ARRIS TG852G is a router from ARRIS. A security vulnerability exists in the ARRIS TG852G, TG862G, and TG1672G, which stems from a vulnerability that allows an attacker to obtain the default WPA2-PSK value by observing beacon frames...

CVE-2023-40039: Improper Access Control

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...

CVE-2023-40039

An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame...

PT-2023-27230 · Arris · Arris Tg862G +2

Name of the Vulnerable Software and Affected Versions: ARRIS TG852G affected versions not specified ARRIS TG862G affected versions not specified ARRIS TG1672G affected versions not specified Description: A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by...