EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a...

Logic Flaw Vulnerability in Backend Management of E-House Real Estate System

Ltd. is a company whose business scope includes: Internet data services, network and information security software development, software and information technology services, software development, information technology consulting services, information processing and storage support services,...

CVE-2022-41025

CVE-2022-41025 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The TALOS report details stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the template handling for commands like vpn pptp advanced name dns (yes|no) mtu mru mppe (on|off) stateful (o...

CVE-2022-41023

CVE-2022-41023 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflow in the DetranCLI command parsing for vpn pptp advanced name (and related templates). The issue arises from unsafe handling of command parameters (e.g., WORD, DNS, MTU, MRU, MPPE, stateful), enablin...

CVE-2022-41021

CVE-2022-41021 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing functionality, exploitable through crafted network packets that trigger the template: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) pas...

CVE-2022-41026

CVE-2022-41026 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Cisco CVE entry describes multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing for the template no vpn pptp advanced name (and related commands), enabling arbitrary command execution via craf...

CVE-2022-41022

CVE-2022-41022 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing, specifically in the template handling the no vpn l2tp advanced name ... options WORD command. A crafted network packet can trigger the overflow and lead ...

CVE-2022-41019

CVE-2022-41019 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The vulnerability is a stack-based buffer overflow in the Det r a nCLI command parsing, triggered by the template handling: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) password (WORD|null). A specially crafted...

CVE-2022-41013

CVE-2022-41013 affects Siretta QUARTZ-GOLD DetranCLI. TALOS reports stack-based buffer overflow vulnerabilities in the DetranCLI parser for the command template static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null). A crafted network packet can trigger an overfl...

CVE-2022-41012

Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) is affected by CVE-2022-41012 due to stack-based buffer overflows in the DetranCLI command parsing, specifically in the templates used to handle commands like no schedule link1 etc. The vulnerabilities are in the DetranCLI parsing logic where unsafe fo...

CVE-2022-41017

CVE-2022-41017 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/NVD entries describe several stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|of...

CVE-2022-41016

CVE-2022-41016 is one of multiple stack-based buffer overflow vulnerabilities in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020’s DetranCLI command parsing. Talos’ TALOS-2022-1613 analysis confirms this family of issues affects the DetranCLI parser and documents several vulnerable command templates, ...

CVE-2022-41001

CVE-2022-41001 affects Siretta QUARTZ-GOLD with DetranCLI on version G5.0.1.5-210720-141020. Talos reports multiple stack-based buffer overflows in DetranCLI command parsing (notably icmp check link) that can be triggered by a crafted network packet to achieve arbitrary command execution. Impact ...

CVE-2022-40999

CVE-2022-40999 corresponds to multiple stack-based buffer overflow vulnerabilities in the Siretta QUARTZ-GOLD DetranCLI command parsing. The TALOS report details a specific vulnerability class affecting the GRE index tunnel command template (gre index tunnel A.B.C.D source dest keepalive interva...

CVE-2022-41002

CVE-2022-41002 is a stack-based buffer overflow in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020, specifically in the DetranCLI command parsing. The TALOS report confirms multiple stack-overflow patterns in the DetranCLI parser that implement commands such as icmp check link and related templates, a...

CVE-2022-41006

CVE-2022-41006 is reported against Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020, describing multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. Talos details show that the overflow occurs in parsing templates such as the no ip static route c...

CVE-2022-41005

CVE-2022-41005 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflows in the DetranCLI command parsing, specifically targeting the ip static route destination … description WORD template. A crafted network packet sequence can lead to arbitrary command execution. Tal...

CVE-2022-41000

CVE-2022-41000 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Talos CVE report details multiple stack-based buffer overflows in the DetranCLI command parsing, enabling arbitrary command execution when a crafted network packet triggers the template for the command: no gre index tunnel ...

CVE-2022-40992

CVE-2022-40992 concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020. The overflow occurs in handling the command template no firmwall domain WORD description (WORD|null), via crafted network packets, enabling ...

CVE-2022-40991

CVE-2022-40991 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via the DetranCLI command parsing stack-based buffer overflow in the command template for firmwall domain WORD description (WORD|null) . A crafted network packet sequence can trigger a overflow leading to arbitrary command execut...