87 matches found
CVE-2023-21631
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
CVE-2021-22824
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...
CVE-2014-125036
A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local...
CVE-2010-2978
Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660...
Alibaba Cloud Linux 3 : 0083: unbound (ALINUX3-SA-2021:0083)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0083 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-12662: Unbound before 1.10.1 has...
PT-2024-36457 · Quectel · Quectel Bc25
Name of the Vulnerable Software and Affected Versions: Quectel BC25 version BC25PAR01A06 Description: The issue allows attackers to bypass authentication via a crafted NAS message. It is noted that Quectel disputes this because the issue is in the chipset supply chain and is not localized to one ...
CVE-2023-21631: Improper Input Validation
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...
The vulnerability of the rds_rm_zerocopy_callback() function in the net/rds/message.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rdsrmzerocopycallback function in the net/rds/message.c module of the Linux operating system is related to incorrect handling of the data block list. Exploiting this vulnerability could allow an attacker to cause a service failure...
K37661551: Unbound DNS Cache vulnerabilities CVE-2020-12662 and CVE-2020-12663
Security Advisory Description CVE-2020-12662 Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. CVE-2020-12663 Unbound before 1.10.1 has an infinite loop via malformed DNS answer...
SUSE CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...
GHSA-P2GM-FFR3-W2XW Nervos CKB vulnerable to low-resource flood DDoS attacks through network message
Workarounds forbid request genesis through network request forbid requesting duplicate data through network request...
Nervos CKB vulnerable to low-resource flood DDoS attacks through network message
Workarounds forbid request genesis through network request forbid requesting duplicate data through network request...
CVE-2014-125036
A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local...
Design/Logic Flaw
A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local...
CVE-2014-125036
CVE-2014-125036 affects drybjed ansible-ntp; the issue concerns the file meta/main.yml where manipulation leads to insufficient control of network message volume. Impact is described as local-network–only with low complexity; exploitability details are not provided in the sources. A patch is avai...
PT-2023-10106 · Unknown · Drybjed Ansible-Ntp
Name of the Vulnerable Software and Affected Versions: drybjed ansible-ntp affected versions not specified Description: A problematic vulnerability has been found in drybjed ansible-ntp, affecting some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control...
The vulnerability of the Network File System (NFS) of the Microsoft Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Network File System NFS of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created NFS network message protocol...
PT-2022-2243 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Network File System NFS of Microsoft Windows. It can be exploited by a remote attacker using a specially crafted NFS...
DEBIAN-CVE-2022-0918
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...
CVE-2021-22824
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...