Stack overflow

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...

CVE-2022-29394

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...

CVE-2022-29394

TOTOLINK N600R is affected by a stack overflow in the macAddress handling inside FUN_0041b448 on firmware V4.3.0cu.7647_B20210106. The issue is described across multiple sources (NVD, Red Hat advisory, CNVD, CVE lists) as a buffer/stack overflow arising from lack of length validation in the macAd...

PT-2022-19574

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the macAddress parameter in the FUN 0041b448 function. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider restricting...

CVE-2022-29394: Out-of-bounds Write

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...

CVE-2018-13797

A flaw was found in nodejs-macaddress. The module allows unsanitized input to an exec call which can lead to an arbitrary command injection flaw. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

GHSA-Q9R2-F3VC-RJG8 Command Injection in macaddress

Withdrawn: Duplicate of GHSA-pp57-mqmh-44h7...

CVE-2019-6258: Buffer Copy without Checking Size of Input

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file...

GHSA-PP57-MQMH-44H7 Command Injection in macaddress

All versions of macaddress are vulnerable to command injection. For this vulnerability to be exploited an attacker needs to control the iface argument to the one method. Recommendation Update to version 0.2.9 or later...

iobroker.yahka (>=0.5.4, <=0.7.1) potentially affected by CVE-2018-13797 via macaddress (0.2.8)

macaddress NPM version 0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on macaddress and may be impacted: - iobroker.yahka =0.5.4, =0.7.1 Source cves: CVE-2018-13797 Source advisory: OSV:GHSA-PP57-MQMH-44H7...

Command Injection in macaddress

All versions of macaddress are vulnerable to command injection. For this vulnerability to be exploited an attacker needs to control the iface argument to the one method. Recommendation Update to version 0.2.9 or later...

Joyent Node.js macaddress module command injection vulnerability

Joyent Node.js is the United States Joyent company's set of built on Google V8 JavaScript engine on top of the web application platform. macaddress module is used in one of the Mac address management module. A command injection vulnerability exists in Joyent Node.js macaddress module versions pri...

Command injection

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

DEBIAN-CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

UBUNTU-CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

CVE-2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFile call...

CVE-2018-13797

CVE-2018-13797 (nodejs-macaddress) affects the macaddress module for Node.js prior to 0.2.9. The root cause is unsanitized input passed to an exec call (not execFile), enabling arbitrary command injection. This could lead to remote command execution, impacting confidentiality, integrity, and avai...