PT-2024-3423

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's inet defrag function, which can cause a problem when reassembling skb fragments via netfilter or similar modules. The function ip local out a...

The vulnerability of the p2putil.c component in the iNet Wireless daemon allows a hacker to induce a service failure.

The vulnerability of the p2putil.c component in iNet Wireless allows for initialization errors to occur. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...

The vulnerability of the microprogramming software of the GL.iNet GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, and GL-AR300M routers relates to the bypassing of authentication processes, allowing an intruder to gain unauthorized access to the router’s web interface.

The vulnerability of the microprogramming software of the GL.iNet GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, GL-AR300M, and GL-B1300 lies in their ability to bypass authentication. Exploiting this vulnerability can allow an...

UBUNTU-CVE-2024-26641

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: make sure to pull inner header in ip6tnlrcv syzbot found ip6tnlrcv could access unitiliazed data 1. Call pskbinetmaypull to fix this, and initialize ipv6h variable after this call as it can change skb-head. 1 BUG: KMSA...

SUSE CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

Fedora 38 : iwd / libell (2024-38faa9a2a8)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-38faa9a2a8 advisory. iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename...

GL.iNet Router Security Vulnerability

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet Router 4.x firmware version, which originated from a vulnerability that allows an attacker to bypass authentication and gain access to the router's web interface...

The vulnerability of the `get_system_log` and `get_crash_log` functions in the logread module of the GL.iNet router microprogramming solutions (GL.iNet A1300, AX1800, AXT1800, MT3000, MT2500, MT6000, MT1300, MT300N-V2, AR750S, AR750, AR300M, B1300) allows a attacker to execute arbitrary code.

The vulnerability of the getsystemlog and getcrashlog functions in the logread module of the GL.iNet routers A1300, AX1800, AXT1800, MT3000, MT2500, MT6000, MT1300, MT300N-V2, AR750S, AR750, AR300M, B1300 exists due to the lack of measures to neutralize special elements used in the operating syst...

DEBIAN-CVE-2021-47103

In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk-skrxdst to RCU rules syzbot reported various issues around early demux, one being included in this changelog 1 sk-skrxdst is using RCU protection without clearly documenting it. And following sequences in...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk-skrxdst to RCU rules syzbot reported various issues around early demux, one being included in this changelog 1 sk-skrxdst is using RCU protection without clearly documenting it. And following sequences in...

CVE-2021-47103

CVE-2021-47103 concerns the Linux kernel: the pointer sk_rx_dst used in inet paths (tcp_v4_do_rcv/tcp_v6_do_rcv) was protected by RCU without proper documentation and ordering, leading to potential use-after-free scenarios demonstrated by KASAN in dst_check and related code paths. The connected S...

CVE-2021-47103 inet: fully convert sk->sk_rx_dst to RCU rules

In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk-skrxdst to RCU rules syzbot reported various issues around early demux, one being included in this changelog 1 sk-skrxdst is using RCU protection without clearly documenting it. And following sequences in...

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

UBUNTU-CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

PT-2024-2303 · Unknown +1 · Inet Wireless Daemon +1

Name of the Vulnerable Software and Affected Versions: iNet wireless daemon IWD versions 2.15 and earlier Description: The issue is related to initialization problems in the p2putil.c component of the iNet wireless daemon IWD, which can cause a denial of service daemon crash or possibly have othe...

iNet wireless daemon security vulnerability

iNet wireless daemon iwd is a network management tool used to manage wireless network interfaces in the Linux operating system. A security vulnerability exists in iNet wireless daemon IWD version 2.15 and earlier, which stems from a denial of service DOS vulnerability in p2putil.c. The...

CVE-2024-28084: Improper Initialization

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

CVE-2024-28084

CVE-2024-28084 affects iNet wireless daemon (IWD) p2putil.c up to version 2.15. The issue stems from initialization during parsing of advertised service information, enabling denial of service via daemon crash and possibly other unspecified impact. Fedora advisories indicate fixes in iwd 2.16 and...

CVE-2024-27356

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300,...