238 matches found
CVE-2022-24939 Malformed Zigbee packet with invalid destination address causes Assert
A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error...
GSD-2022-1007040 wifi: brcmfmac: fix invalid address access when enabling SCAN log level
wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...
PT-2022-35037 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the ACPI tables, specifically the FPDT, where a function call is made on an invalid physical address. The actual impact and potential for attack have not been proven...
PT-2022-35501 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...
PT-2022-35295 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...
PT-2022-35647 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...
May introduce an invalid Facet into the system
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The saveFacetIfNew has not checked if the newly introduced facet is valid or not a valid contract, therefore, an invalid address might be added as a facet. according to Solidity documentation, "If the...
A OS Command Injection vulnerability exists in Node.js versions <14.20.0 <16.20.0 <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.
...
CVE-2022-32212
A OS Command Injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks...
Node.js 操作系统命令注入漏洞
Node.js is an open source, cross-platform JavaScript runtime environment. Node.js suffers from an operating system command injection vulnerability that stems from the inability of IsIPAddress to properly check for an invalid IP address. When an invalid IPv4 address is supplied, the browser will...
CVE-2021-26375
Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...
CVE-2021-26378
Insufficient bound checks in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...
CVE-2021-26372
Insufficient bound checks related to PCIE in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...
AMD System Management Unit 缓冲区错误漏洞
AMD System Management Unit SMU is a system management unit of AMD Corporation. A security vulnerability exists in the AMD System Management Unit, which stems from an insufficient General Purpose IO GPIO boundary check in the System Management Unit SMU, resulting in a denial of service due to acce...
PT-2022-9747 · Unknown +1 · Amd System Management Unit +1
Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to an insufficient General Purpose IO GPIO bounds check in the System Management Unit SMU. This may result in access or updates to invalid address...
CVE-2021-26372
Insufficient bound checks related to PCIE in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...
CVE-2021-26375
Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...
CVE-2021-26378
Insufficient bound checks in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...
