TOTOLINK A810R infostat.cgi buffer overflow vulnerability

TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R infostat.cgi suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the service program or execute arbitrary code in...

EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2024-2896)

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There exists an unchecked length field in UBoot.The U-Boot DFU implementation does not bound the length field in USB DFU download setup...

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the Metal framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

CVE-2024-7180

TOTOLINK A3600R is affected by a buffer overflow in the setPortForwardRules function (in /cgi-bin/cstecgi.cgi) caused by improper validation of the comment parameter. Affected version: 4.1.2cu.5182_B20201102. The issue can be exploited remotely, and public exploits have been disclosed. Multiple s...

CVE-2024-31031

An issue in coappdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow...

PT-2024-23732

Name of the Vulnerable Software and Affected Versions: libcoap version 4.3.4 Description: An issue in coap pdu.c allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow. Recommendations: For libcoap version 4.3.4, consider restricting access to...

RHEL 8 : squid:4 (RHSA-2023:7213)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7213 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Deni...

RHEL 8 : squid:4 (RHSA-2023:6804)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6804 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Deni...

Security Bulletin: IBM Storage Ceph is vulnerable to a stack overflow attack in Golang (CVE-2022-24675)

Summary Golang is used by IBM Storage Ceph as part of RGW and in assorted other locations. CVE-2022-24675 Vulnerability Details CVEID: CVE-2022-24675 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a stack-based buffer overflow in encoding/pem in the Decode feature. By...

CVE-2022-28733

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

TRENDnet TEW-755AP stack overflow vulnerability (CNVD-2023-18946)

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the loginname parameter of the dographauth sub4061E0 function, which can be exploited by an attacker to execute arbitrary...

CVE-2022-31784

A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker that has network access to the management interface to conduct a buffer overflow attack due to insufficient validation of URL...

Huawei EulerOS: Security Advisory for aide (EulerOS-SA-2022-1642)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Digi Passport 缓冲区错误漏洞

Digi Passport is a series of console servers from Digi USA. It provides secure remote access to computer systems and network devices. A security vulnerability in Digi Passport Firmware prior to 1.5.1,1 allows an attacker to supply a string in a page parameter for the reboot.asp endpoint and force...

Buffer overflow

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

MGASA-2021-0220 Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...

Stack Overflow Vulnerability in Multiple TPLINK Routers

The TP-Link TL-WDR5620 is a smart router.The TP-Link TL-WDR5650 is a dual-band wireless router.The TP-LINK TL-WR842N is a wireless router.The TP-link TL-WDR7660, TL-WDR7620, TL-WDR7661, TL-WDR7650 and the TL-R470P-AC are all gigabit version routers.TP-link TL-WA933RE is a cellular wireless...

SUSE-SU-2021:14714-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records...

SUSE-SU-2021:1469-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records...

ISC BIND Buffer Overflow Vulnerability (CVE-2021-25216) - Windows

ISC BIND is prone to a buffer overflow vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...