31 matches found
CVE-2024-49945 net/ncsi: Disable the ncsi work before freeing the associated structure
In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic...
PT-2024-33787
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the net/ncsi component. The issue arises when the work function is not disabled before freeing the associated...
The vulnerability in the `src/ncsi.c` component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.
The vulnerability of the src/ncsi.c component of the TCP-IP Libslirp emulator is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
SUSE-SU-2023:0870-1 Security update for slirp4netns
This update for slirp4netns fixes the following issues: - CVE-2020-29129: Fixed out-of-bounds access while processing NCSI packets bsc1179466. - CVE-2020-29130: Fixed out-of-bounds access while processing ARP packets bsc1179467...
SUSE CVE-2020-29129
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length...
QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets
An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to...
SUSE: Security Advisory (SUSE-SU-2021:1244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 32 : libslirp (2020-331e1318dd)
Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 33 : libslirp (2020-77f93f41be)
Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2020-29130
An out-of-bounds access issue was found in the SLiRP user networking implementation of QEMU. It could occur while processing ARP/NCSI packets, if the packet length was shorter than required to accommodate respective protocol headers and payload. A privileged guest user may use this flaw to...