Command injection

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...

CVE-2023-6640

CVE-2023-6640 involves Silicon Labs PC Controller (v5.54.0 and earlier). The vulnerability stems from malformed S2 Nonce Get Command Class packets that can crash the PC Controller, yielding a Denial of Service in affected versions. The NVD entry lists a CVSSv3.1 base score of 6.5 (Attack Vector: ...

Ubiquiti UniFi Switches Security Vulnerability

Ubiquiti UniFi Switches is a series of switches from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi Switches versions prior to 6.6.61, which stems from the fact that an attacker with network access privileges may be able to disrupt device management and discovery functionality by...

CVE-2023-5188

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

Rockwell Automation Stratix 5900 (CVE-2015-0642)

Devices running Cisco IOS Software or IOS XE Software contain vulnerabilities within the Internet Key Exchange IKE version 2 subsystem that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to how an affected device processes...

wireshark: VMS TCPIPtrace file parser crash

A flaw was found in the VMS TCPIPtrace file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: NetScaler file parser crash

A flaw was found in the NetScaler file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: XRA dissector infinite loop

A flaw was found in the XRA dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service...

wireshark: RTPS dissector crash

A flaw was found in the RTPS dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

PT-2023-9828 · Cisco · Cisco Sd-Wan Vedge

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge Software affected versions not specified Description: The issue is related to a flaw in the UDP packet validation code, which could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a...

samba: infinite loop in mdssvc RPC service for spotlight

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

kernel: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx

A flaw was identified in the Linux kernel’s ath9k wireless driver where the receiver packet handling code did not correctly validate the length of incoming SKBs before accessing subsequent fields expected to be present. In certain malformed packet conditions e.g., pktlen set too small, the driver...

wireshark: VMS TCPIPtrace file parser crash

A flaw was found in the VMS TCPIPtrace file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: NetScaler file parser crash

A flaw was found in the NetScaler file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: Candump log file parser crash

A flaw was found in the Candump log file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: XRA dissector infinite loop

A flaw was found in the XRA dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service...

wireshark: IEEE C37.118 Synchrophasor dissector crash

A flaw was found in the IEEE C37.118 Synchrophasor dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

wireshark: RTPS dissector crash

A flaw was found in the RTPS dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

GHSA-GFVQ-MXW3-MFQ3 asyncua vulnerable to denial of service via infinite loop

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...

UBUNTU-CVE-2023-26151

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service DoS such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory...