CVE-2024-20067

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462...

CVE-2024-20067

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462...

CVE-2024-20066

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477...

CVE-2024-20066

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477...

PT-2024-18555 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a possible information disclosure in the modem due to the use of a risky cryptographic algorithm during connection establishment negotiation. This could lead to remote...

CVE-2024-20069: Selection of Less-Secure Algorithm During Negotiation

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Iss...

CVE-2024-20070: Use of a Broken or Risky Cryptographic Algorithm

In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation. This could lead to remote information disclosure, when weak encryption algorithm is used, with no additional execution privileges needed. User interaction i...

CVE-2024-20066: Out-of-bounds Write

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477...

PT-2024-18550

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User...

PT-2024-18552 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to improper input validation, which can cause a system crash. This can lead to a remote denial of service, and no additional execution privileges are needed for...

CVE-2024-20068: Out-of-bounds Write

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01270721; Issue ID: MSV-1479...

SUSE CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

DEBIAN-CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

UBUNTU-CVE-2023-52872

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

CVE-2023-52872

The CVE-2023-52872 vulnerability affects the Linux kernel tty/n_gsm subsystem. A race in gsm_cleanup_mux() during the cleanup of GSM DLCIs can spuriously change virtual modem status lines while data/timers are being torn down, risking a kernel panic when resources have already been removed. The f...

CVE-2023-52872 tty: n_gsm: fix race condition in status line change on dead connections

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix race condition in status line change on dead connections gsmcleanupmux cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure,...

Telit Cinterion Modem Information Disclosure

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to protected information...

Telit Cinterion modem Path Traversal

The vulnerability of Telit Cinterion modem’s microprogramming software relates to the exploitation of a relative path. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary system files...

Telit Cinterion Modem Privilege Escalation

The vulnerability of Telit Cinterion modem’s microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges within the system...

Telit Cinterion Modem Information Disclosure

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information through variable environments. Exploiting this vulnerability can allow an intruder to gain access to protected information...