CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37663

CVE-2024-37663 affects Redmi router RB03 v1.0.57. The flaw allows forged ICMP redirect messages, enabling an attacker on the same WLAN to hijack traffic between a victim and any remote server. Root cause: manipulation of ICMP redirect handling that redirects traffic through attacker-controlled pa...

CVE-2024-37661

Affected product: TP-LINK TL-7DR5130 router (firmware v1.0.23). Vulnerability: forged ICMP redirect messages allowing an attacker on the same WLAN to hijack traffic between a victim and remote servers. Root cause: insufficient verification of the ICMP redirect source/channel, enabling misrouting....

CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37661

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37663

Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

CVE-2024-37661

TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages...

PT-2024-4791 · Tp Link · Tp-Link Tl-7Dr5130

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-7DR5130 version 1.0.23 Description: The issue is related to the mechanism of transmitting routing information to hosts via ICMP Redirect in the TP-LINK TL-7DR5130 wireless router's firmware. It is associated with insufficient...

SUSE CVE-2024-36927

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

CVE-2024-36927

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

AZL-56207 CVE-2024-36927 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

DEBIAN-CVE-2024-36927

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

UBUNTU-CVE-2024-36927

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

CVE-2024-34947

Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack...

CVE-2024-34947

Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack...

CVE-2024-34947

Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack...

CVE-2024-34947

CVE-2024-34947 concerns the IK-Q3000 router from Quanxun Huiju Network Technology (Beijing) Co.,Ltd, specifically version 3.7.10 (x64 Build202401261655). The connected documents consistently state a vulnerability to ICMP redirect attacks affecting this device/version. The Red Hat/NVD/CVE entries ...

Quanxun Huiju Network Technology IK-Q3000 安全漏洞

Quanxun Huiju Network Technology IK-Q3000 is a router from Quanxun Huiju Network Technology China. A security vulnerability exists in Quanxun Huiju Network Technology IK-Q3000 version 3.7.10 x64 Build202401261655, which is vulnerable to ICMP redirection attacks...

CVE-2024-35857

A flaw was found in the Linux kernel's ICMP protocol. Under some conditions, a NULL pointer dereference can be triggered due to a missing check, causing a system crash and resulting in a denial of service. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2024-35857

In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmpbuildprobe First problem is a double call to indevgetrcu, because the second one could return NULL. if indevgetrcudev && indevgetrcudev-ifalist Second problem is a read from...