CVE-2023-37327

Consolidated: CVE-2023-37327 targets GStreamer, specifically the FLAC file parsing path. The flaw is an integer overflow while handling FLAC data, leading to a heap overwrite and remote code execution. The issue affects gstreamer1-plugins-good (and related GStreamer components) and has had vendor...

CVE-2023-37321

CVE-2023-37321 affects D-Link DAP-2622 routers via the DDP set SSID List RADIUS Secret, caused by a stack-based buffer overflow due to improper validation of user-supplied data length. This allows network-adjacent attackers to execute arbitrary code with root privileges, without authentication. T...

CVE-2023-37317

The CVE-2023-37317 entry concerns D-Link DAP-2622 routers with a stack-based buffer overflow in the DDP service when processing IPv6 Address Primary DNS data. The flaw arises from insufficient validation of user-supplied data prior to copying into a fixed-length stack buffer, enabling a network-a...

CVE-2023-37315

CVE-2023-37315 affects D-Link DAP-2622 routers. The DDP Set IPv6 Address Authentication Password vulnerability stems from improper validation of user-supplied data length copied into a fixed-length stack buffer, enabling remote code execution as root. Exploitation appears possible over a network-...

CVE-2023-37313

CVE-2023-37313 affects D-Link DAP-2622 routers. The DDP service fails to validate the length of user-supplied data when handling the IPv4 address/auth username, causing a stack-based buffer overflow that allows remote code execution with root privileges. This vulnerability can be exploited by net...

CVE-2023-37311

DVE-2023-37311 affects D-Link DAP-2622 routers. The DDP service allows a stack-based buffer overflow on user-supplied data, enabling remote code execution with root privileges and no authentication. Public documentation consistently cites this as a stack-based overflow in the DDP Set Device Info ...

CVE-2023-35754

CVE-2023-35754 affects D-Link DAP-2622 routers, via a stack-based buffer overflow in the DDP Set AG Profile NMS URL. The flaw arises from improper validation of user-supplied data length before copying to a fixed-length stack buffer, allowing network-adjacent attackers to execute code with root p...

CVE-2023-35752

CVE-2023-35752 affects D-Link DAP-2622 via the DDP service, due to improper validation of user-supplied data leading to a stack-based buffer overflow and remote code execution with root privileges. Attack requires network adjacency and no authentication. Documented CVSS v3.1/3.0 score: 8.8 (HIGH)...

CVE-2023-35751

Affected product: D-Link DAP-2622 (DDP service). Vulnerability: Stack-based buffer overflow caused by improper validation of the length of user-supplied data prior to copying it into a fixed-length stack buffer, leading to remote code execution in the context of root. Impact/conditions: Remote co...

CVE-2023-35750

CVE-2023-35750 affects D-Link DAP-2622 routers. The flaw resides in the DDP service, enabling information disclosure via lack of authentication. An unauthenticated, network-adjacent attacker can access credentials stored by the device, with potential to further compromise. Public metrics indicate...

CVE-2023-35746

CVE-2023-35746 affects the D-Link DAP-2622 DDP firmware. The flaw resides in the DDP service where insufficient validation of user-supplied data length leads to a stack-based buffer overflow, enabling remote code execution with root privileges. The attack is network-adjacent and requires no authe...

CVE-2023-35747

CVE-2023-35747 – D-Link DAP-2622 DDP vulnerability : The flaw is in the DDP service of the DAP-2622 routers, caused by improper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This leads to a stack-based buffer overflow with the potential for Remote Co...

CVE-2023-35742

CVE-2023-35742 affects D-Link DAP-2622 routers. The issue is a stack-based buffer overflow in the DDP service caused by insufficient validation of a user-supplied length, enabling network-adjacent attackers to execute arbitrary code with root privileges without authentication. The flaw descriptio...

CVE-2023-35743

CVE-2023-35743 concerns the D-Link DAP-2622 DDP service. The flaw is a stack-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying into a fixed-size stack buffer, enabling remote code execution in the context of root. The vulnerability permits ...

CVE-2023-35736

The CVE-2023-35736 entry concerns D-Link DAP-2622 routers. Affected component: DDP service within the device firmware. Root cause: improper validation of user-supplied data length before copying to a fixed-length stack-based buffer, leading to a stack-based buffer overflow. Impact: remote code ex...

CVE-2023-35735

The CVE-2023-35735 entry concerns the D-Link DAP-2622 router. A flaw in the DDP service arises from improper validation of user-supplied data length before copying it into a fixed-size stack buffer, enabling a stack-based buffer overflow that can execute code in the root context. Exploitation is ...

CVE-2023-35732

The CVE-2023-35732 issue affects D-Link DAP-2622 routers, specifically in the DDP service. It arises from improper validation of the length of user-supplied data before copying it into a fixed-length stack-based buffer, enabling a stack-based overflow. This allows adjacent-network attackers to ex...

CVE-2023-35726

The CVE-2023-35726 issue affects D-Link DAP-2622 routers, originating in the DDP service. It is a stack-based buffer overflow caused by insufficient validation of user-supplied data length before copying to a fixed-size stack buffer. This allows network-adjacent attackers to execute arbitrary cod...

CVE-2023-35725

CVE-2023-35725 affects D-Link DAP-2622 devices via a stack-based buffer overflow in the DDP service. The vulnerability arises from improper validation of user-supplied data length before copying to a fixed-length stack buffer, enabling network-adjacent attackers to execute code with root privileg...

CVE-2023-35724

The CVE-2023-35724 entry concerns D-Link DAP-2622 routers where the Telnet CLI service uses hard-coded credentials, allowing authentication bypass for network-adjacent attackers. Affected component: Telnet/CLI service listening on TCP port 23. Root cause: server program contains hard-coded creden...