SUSE CVE-2024-45026

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

DEBIAN-CVE-2023-52915

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035i2cmasterxfer In af9035i2cmasterxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally...

openSUSE Security Advisory (SUSE-SU-2024:3108-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3108-1 Security update for frr

This update for frr fixes the following issues: - CVE-2024-44070: Fixed missing stream length check before TLV value is taken in bgpattrencap bsc1229438...

SUSE-SU-2024:3090-1 Security update for frr

This update for frr fixes the following issues: - CVE-2024-44070: Fixed missing stream length check before TLV value is taken in bgpattrencap bsc1229438...

CVE-2024-33050

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33057 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

CVE-2024-33057

CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

CVE-2024-33050 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33050 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

PT-2024-25098 · Qualcomm · Snapdragon +173

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs when parsing the multi-link element Control field, specifically when a common...

PT-2025-2708 · Qualcomm · Snapdragon +167

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A transient Denial of Service DOS can occur when the driver parses the per STA profile Information Element IE and attempts to access the EXTN element ID...

PT-2024-25093 · Unknown · Qualcomm Technologies

Name of the Vulnerable Software and Affected Versions: Qualcomm Technologies, Inc. products affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing MBSSID during the generation of a new Information Element IE in beacon or...

Gzip Memory Bomb Denial Of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' require 'stringio' class MetasploitModule 'Gzip Memory Bomb Denial Of Service', 'Description' = %q This module generates and hosts a 10MB single-round gzi...

FRRouting 安全漏洞

FRRouting is the FRRouting open source suite of network routing software that runs on Unix-like platforms. A security vulnerability exists in FRRouting versions 10.1 and earlier, which stems from bgpattrencap in bgpd/bgpattr.c that does not check the actual remaining stream length before obtainin...

kernel: net: netlink: af_netlink: Prevent empty skb by adding a check on len.

In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len parameter to avoid empty skb. This prevents a division error in netemenqueue function which is caused when skb-len=0 and skb-datalen=0 in...

CVE-2024-42459

A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues. Mitigation Mitigation fo...

Signature Malleability

Elliptic is vulnerable to Signature Malleability. The vulnerability is due to lack of a signature length check, allowing for the manipulation of EDDSA signatures by adding or removing zero-valued bytes...