244 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-25763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. CVE-2024-25763 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2023-38324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence and directly authenticate when it is using the default FAS ke...
Linux Distros Unpatched Vulnerability : CVE-2023-38321
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference,...
Linux Distros Unpatched Vulnerability : CVE-2023-38313
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a dobinauth NULL pointer dereference that can be triggered with a crafted GET HTTP reque...
Linux Distros Unpatched Vulnerability : CVE-2023-38319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or...
Linux Distros Unpatched Vulnerability : CVE-2023-38320
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a showpreauthpage NULL pointer dereference that can be triggered with a crafted...
USN-7312-1 opennds vulnerability
It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
USN-7312-1: openNDS vulnerability
It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
Ubuntu: Security Advisory (USN-7312-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 24.04 LTS / 24.10 : openNDS vulnerability (USN-7312-1)
The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7312-1 advisory. It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service ...
The vulnerability in the get_query function of http_microhttpd.c allows a high-performance authentication gateway, OpenNDS, to execute arbitrary code by a attacker.
The vulnerability in the getquery function of the high-performance authentication gateway OpenNDS lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted GET requests remotely...
DEBIAN-CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
Design/Logic Flaw
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
UBUNTU-CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
CVE-2024-25763
CVE-2024-25763 affects openNDS 10.2.0 with a Use-After-Free in /openNDS/src/auth.c. The Red Hat/OSV/Ubuntu/NASL entries confirm the same description across multiple sources. The CVE’s metrics show a CVSS v3.1 base score of 5.5 (Medium) with network attack vector, low attack complexity, and privil...
