991 matches found
CVE-2023-3748
CVE-2023-3748 affects FRRouting (FRR) where parsing of certain babeld unicast hello messages that are intended to be ignored can be abused by sending crafted Hello messages with the unicast flag set, the interval field as 0, or a TLV containing a sub‑TLV with the Mandatory flag. This can enter an...
CVE-2023-3748 Inifinite loop in babld message parsing may cause dos
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory...
PT-2023-9209 · Frrouting +4 · Frrouting +4
Name of the Vulnerable Software and Affected Versions: FRRouting affected versions not specified Description: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages...
CVE-2023-34462
A flaw was found in Netty's SniHandler while navigating TLS handshake which may permit a large heap allocation if the handler did not have a timeout configured. This issue may allow an attacker to send a client hello packet which would cause the server to buffer large amounts of data per...
SUSE CVE-2023-3748
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory...
The vulnerability of the dn_nsp_send() function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the dnnspsend function in Linux operating system kernels is related to the pointer dereferencing when attempting to connect to a local host using the DECnet protocol. Exploiting this vulnerability allows a remote attacker to trigger a service failure by sending a specially...
CVE-2023-34761
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter...
CVE-2023-34761
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter...
PT-2023-25005 · Hello Cup · Hello Cup
Name of the Vulnerable Software and Affected Versions: Hello Cup version 1.3.1 for Android Description: An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup and bypass the application's client-side chat censor filter. Recommendations: For Hello Cup...
CVE-2023-34761
CVE-2023-34761 describes an unauthenticated BLE proximity attack affecting the 7-Eleven LED Message Cup (and Hello Cup 1.3.1 for Android). An attacker in Bluetooth range can remotely connect and bypass the app’s client-side chat censorship filter. Affected components include the Hello Cup/LED Cup...
SUSE CVE-2023-34462
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The SniHandler can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle...
UBUNTU-CVE-2023-34462
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The SniHandler can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle...
The vulnerability of the biometric authentication function of Windows Hello on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created file...
CVE-2023-32018
Windows Hello Remote Code Execution Vulnerability...
CVE-2023-32018
Windows Hello Remote Code Execution Vulnerability...
CVE-2023-32018
Windows Hello Remote Code Execution Vulnerability...
Remote code execution
Windows Hello Remote Code Execution Vulnerability...
CVE-2023-32018
Technical details for CVE-2023-32018 are not publicly provided in the supplied documents. The sources reference Windows Hello RCE, but no root cause, affected products/versions, or fixes are specified here. Monitor for updates.
