Lucene search
+L

85 matches found

OSV
OSV
added 2024/03/03 9:15 p.m.4 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS7.3AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2024/03/03 9:15 p.m.31 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS7.1AI score0.00937EPSS
SaveExploits0References3
Prion
Prion
added 2024/03/03 9:15 p.m.12 views

Design/Logic Flaw

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.8AI score0.00937EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/03 12:0 a.m.11 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.8AI score0.00937EPSS
SaveExploits0References4
CVE
CVE
added 2024/03/03 12:0 a.m.6967 views

CVE-2024-28084

CVE-2024-28084 affects iNet wireless daemon (IWD) p2putil.c up to version 2.15. The issue stems from initialization during parsing of advertised service information, enabling denial of service via daemon crash and possibly other unspecified impact. Fedora advisories indicate fixes in iwd 2.16 and...

7.5CVSS7.9AI score0.00937EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2024/03/03 12:0 a.m.25 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

8.2AI score0.00937EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/03/03 12:0 a.m.46 views

CVE-2024-28084

p2putil.c in iNet wireless daemon IWD through 2.15 allows attackers to cause a denial of service daemon crash or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails...

7.5CVSS8AI score0.00937EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/02/26 12:0 a.m.22 views

Debian: Security Advisory (DSA-5631-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References2
Debian
Debian
added 2024/02/25 10:45 a.m.119 views

[SECURITY] [DSA 5631-1] iwd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5631-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 25, 2024 https://www.debian.org/security/faq -...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/25 12:0 a.m.30 views

Debian dsa-5631 : iwd - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5631 advisory. - The Access Point functionality in eapolauthkeyhandle in eapol.c in iNet wireless daemon IWD before 2.14 allows attackers to gain unauthorized access to a protected...

7.5CVSS7.7AI score0.01103EPSS
SaveExploits0References5
OSV
OSV
added 2024/02/25 12:0 a.m.15 views

DSA-5631-1 iwd - security update

Bulletin has no description...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/02/23 12:0 a.m.20 views

Debian: Security Advisory (DLA-3738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/22 5:15 p.m.8 views

AZL-43933 CVE-2023-52161 affecting package iwd 1.22-2

The Access Point functionality in eapolauthkeyhandle in eapol.c in iNet wireless daemon IWD before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key...

7.5CVSS5.8AI score0.01103EPSS
SaveExploits0References1
Debian
Debian
added 2024/02/22 3:8 p.m.80 views

[SECURITY] [DLA 3738-1] iwd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3738-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 22, 2024 https://wiki.debian.org/LTS -...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/22 12:0 a.m.30 views

Debian dla-3738 : iwd - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3738 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3738-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.6AI score0.01103EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/22 12:0 a.m.30 views

DLA-3738-1 iwd - security update

Bulletin has no description...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0
CVE
CVE
added 2024/02/22 12:0 a.m.393 views

CVE-2023-52161

CVE-2023-52161 affects iNet Wireless Daemon (IWD) via the Access Point path in eapol_auth_key_handle (eapol.c); vulnerable in IWD versions before 2.14. An attacker can complete the EAPOL handshake by skipping Msg2/Msg4 and sending Msg4/4 with an all-zero key to gain unauthorized access to a prote...

7.5CVSS7.4AI score0.01103EPSS
SaveExploits0References13Affected Software1
Veracode
Veracode
added 2024/02/20 3:58 p.m.23 views

Improper Authentication

iNet wireless daemon IWD is vulnerable to Improper Authentication. The vulnerability is due to an oversight that allows attackers to exploit the EAPOL handshake process by skipping Msg2/4 and sending Msg4/4 with an all-zero key, thereby gaining unauthorized access to a protected Wi-Fi network...

7.5CVSS6.7AI score0.01103EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2023/08/13 9:15 p.m.19 views

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

6.1CVSS6AI score0.00309EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/13 9:15 p.m.6 views

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

6.1CVSS5.8AI score0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder