88 matches found
CVE-2026-63918
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
EUVD-2026-45691
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
CVE-2026-63918 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
CVE-2026-63918 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
In the Linux kernel, the following vulnerability has been resolved: l2tp: use refcountincnotzero in l2tpsessiongetbyifname A reader in l2tpsessiongetbyifname can return a pointer to a session whose refcount has reached zero. The getter takes its reference with plain refcountinc, but every other...
CVE-2026-23995 EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
CVE-2024-41318
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...
CVE-2024-41315
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
Buffer Overflow
libcsp.so is vulnerable to Buffer Overflow. The vulnerability is due to improper handling of the ifname parameter in the cspethinit function, where strcpy is used without validating input length, which allows an attacker to overflow the buffer and potentially execute arbitrary code...
EUVD-2023-42635
Malicious code in bioql PyPI...
EUVD-2025-13460
Malicious code in bioql PyPI...
EUVD-2025-24163
Malicious code in bioql PyPI...
GNU libcdio csp_eth_init function buffer overflow vulnerability
GNU libcdio is an American GNU community library for CD-ROM and CD image access. A buffer overflow vulnerability exists in GNU libcdio version 2.0, which stems from the failure of the ifname parameter in the cspethinit function to properly validate the length and size of the input data, and can b...
UBUNTU-CVE-2025-51823
libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...
CVE-2025-51823
libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...
GNU libcdio 安全漏洞
GNU libcdio is an American GNU community library for CD-ROM and CD image access. A buffer overflow vulnerability exists in GNU libcdio version 2.0, which stems from the failure of the ifname parameter in the cspethinit function to properly validate the length and size of the input data, and can b...
CVE-2025-51823
The CVE-2025-51823 entry affects libcsp 2.0. The vulnerability is a buffer overflow in the csp_eth_init() function caused by copying the interface name (ifname) into ctx->name with strcpy without validating input length. This is the underlying root cause described across multiple sources, whic...
CVE-2024-57224
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
CVE-2024-57227
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...