GSD-2021-1002670 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002647 mac80211: track only QoS data frames for admission control

mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...

PT-2021-27138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

PT-2021-27160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

PT-2021-27203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to the mac80211 component, which tracks QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-27115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description The issue is related to the mac80211 component, specifically with tracking QoS data frames for admission control. The actual impact and attack plausibility have not yet been proven...

SUSE-SU-2021:4168-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed out-of-bounds read on truncated key frames bsc1166066...

python-eventlet: improper handling of highly compressed data and memory allocation with excessive size allows DoS

A flaw was found in eventlet. If an unauthenticated user manages to send large websocket frames or highly compressed data frames that can lead to memory exhaustion. An attacker could use this flaw to cause a denial of service DoS...

CVE-2021-38508: Improper Restriction of Rendered UI Layers or Frames

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

CVE-2021-40288

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames...

CVE-2020-12140

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames...

CVE-2020-12140

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames...

Buffer overflow

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames...

Security Bulletin: This Power System update is being released to address CVE-2018-5391

Summary POWER9: In response to a denial of service vulnerability, a new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-5391. A remote attacker could use large IP frames to trigger time and calculation expensive calls in the...

CVE-2021-40288

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames...

CVE-2020-12140

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames...

TP-Link AX10安全漏洞

TP-Link AX10 is a router from Tp-link, China. TP-Link AX10 has a security vulnerability that could be exploited to disconnect a connected wireless client by sending a spoofed authentication frame specific to the wireless adapter...

CVE-2020-12140: Buffer Copy without Checking Size of Input

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames...

PT-2021-9441

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 and earlier Description A buffer overflow in the BLE stack, specifically in os/net/mac/ble/ble-l2cap.c, allows an attacker to execute arbitrary code via malicious L2CAP frames. Recommendations For Contiki-NG versions 4....

PT-2021-7051 · Tp Link · Tp-Link Ax10

Name of the Vulnerable Software and Affected Versions: TP-Link AX10v1 version V1 211014 and earlier Description: A denial-of-service attack in WPA2 and WPA3-SAE authentication methods allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending wireless...