478 matches found
DEBIAN-CVE-2023-4207
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. When fwchange is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when updati...
AZL-28678 CVE-2023-4207 affecting package kernel for versions less than 5.15.131.1-2
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. When fwchange is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when updati...
UBUNTU-CVE-2023-4207
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. When fwchange is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when updati...
Memory corruption
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...
CVE-2023-28559
CVE-2023-28559: Memory corruption in WLAN firmware when processing command parameters from untrusted WMI payload. Affected: Qualcomm WLAN FW components (WLAN HAL). Root cause evidenced by multiple sources describing a WLAN firmware memory corruption issue; CVSS v3.1 base score 7.8 (High) with LOC...
CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload...
CVE-2023-3703
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
Default credentials
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...
CVE-2023-3703
CVE-2023-3703 affects Proscend Advice ICR Series routers, specifically firmware version 1.76. The vulnerability arises from the use of default credentials, enabling unauthenticated network access with high impact (confidentiality, integrity, availability). Public metrics indicate critical severit...
Use-after-free in Linux kernel's net/sched: cls_fw component
...
CVE-2023-37214
CVE-2023-37214 concerns Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025 . CNNVD reports a command injection vulnerability in this device/firmware. Connected documents provide limited technical detail: no explicit root cause, vulnerable component, exploit details, or CVSS data beyond...
PT-2023-4878
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability in the Linux kernel's net/sched: cls fw component can be exploited to achieve local privilege escalation. When fw change is called on an existing filter, t...
DEBIAN-CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...
AZL-27677 CVE-2023-3776 affecting package kernel for versions less than 5.15.122.1-2
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...
UBUNTU-CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...
CVE-2023-22299
An OS command injection vulnerability exists in the vtyshubus getfwlogs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability...
Milesight UR32L 操作系统命令注入漏洞
The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L vtyshubus getfwlogs function, which can be exploited by an attacker to execute arbitrary commands on the system...