103 matches found
EUVD-2025-42736
Malicious code in oktafian-kembang33-sukiwir npm...
EUVD-2011-5222
Malware in sbrugna...
kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...
CVE-2023-53476
In the Linux kernel, the following vulnerability has been resolved: iwcxgb4: Fix potential NULL dereference in c4iwfillrescmidentry This condition needs to match the previous "if epcp-state == LISTEN " exactly to avoid a NULL dereference of either "listenep" or "ep". The problem is that "epcp" ha...
DEBIAN-CVE-2025-38211
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...
UBUNTU-CVE-2025-38211
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...
iw bug fix and enhancement update
An update is available for iw. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5 Relea...
DEBIAN-CVE-2024-41072
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check whether number of channels passed via 'ioctlsock, SIOCSIWSCAN, ...' doesn't exceed IWMAXFREQUENCIES and reject invalid request with...
PT-2024-8232
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.50 Description: The issue is related to a use-after-free vulnerability in the RDMA/iwcm module of the Linux kernel. This vulnerability occurs when the iw conn req handler function associates a new struct rdm...
iw bug fix and enhancement update
An update is available for iw. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4 Relea...
Malicious code in ng-iw-auth-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b2c0e798068a786168885e29f151a6f4e1b231ce79af7c664d83c5774ed1ce6 The OpenSSF Package Analysis project identified 'ng-iw-auth-tools' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2022-33846
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue concerns a problem with duplicated reported IW CM EVENT CONNECT REPLY events in RDMA/siw. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...
PT-2022-34105
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description The issue is related to a problem in the RDMA/siw component where a duplicated reported IW CM EVENT CONNECT REPLY event occurs. The actual impact and potential for attack have not been prove...
PT-2022-34273 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A potential security issue exists in the RDMA/siw component, where a duplicated reported IW CM EVENT CONNECT REPLY event may occur. The actual impact and attack plausibility have not yet be...
new packages: iw
An update is available for iw. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
CVE-2021-33531
In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...
PT-2021-20178
Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A vulnerability exists due to the use of hard-coded credentials in multiple iw utilities. The device operating system contains an undocumented encryption password,...
PT-2021-20179
Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A command injection issue exists in the iw webs functionality, allowing an attacker to gain remote control over the device. This can be triggered by a specially...
PT-2021-20184
Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A remote code execution issue exists in the configuration parsing functionality of the iw webs due to an error message buffer overflow. This can be triggered by a...
PT-2021-20180
Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A command injection issue exists in the iw webs functionality, allowing an attacker to gain remote control over the device. This can be triggered by a specially...