CVE-2023-27054

CVE-2023-27054 concerns a cross-site scripting (XSS) flaw in MiroTalk P2P, specifically in the settings module where a crafted payload injected into the Name parameter can execute arbitrary web scripts or HTML. The vulnerability arises from the handling of the Name field prior to the commit f535b...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

CVE-2023-27054

A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...

SUSE CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

SUSE CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the wireless network driver WILC1000 for the Linux operating system is related to the lack of checking for the IEEE80211P2PATTRCHANNELLIST in the drivers/net/wireless/microchip/wilc1000/cfg80211.c file. Exploiting this vulnerability can allow a attacker to execute arbitrary...

DEBIAN-CVE-2022-47521

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTRCHANNELLIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi...

DEBIAN-CVE-2022-47519

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frame...

AZL-11857 CVE-2022-47519 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frame...

AZL-11859 CVE-2022-47521 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTRCHANNELLIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi...

CVE-2022-47519

CVE-2022-47519 affects the Linux kernel prior to 6.0.11 due to missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in the WILC1000 driver (drivers/net/wireless/microchip/wilc1000/cfg80211.c). This can trigger an out-of-bounds write when parsing the channel list attribute from Wi‑Fi management f...

CVE-2022-45513

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...

bioyino-metric (>=0.1.0 <=0.2.0), capnp-futures (>=0.10.0 <=0.12.0) +12 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1 <=0.12.4)

capnp CARGO version =0.0.1, =0.1.0, =0.10.0, =0.0.1, =0.0.1, =0.2.8, =1.0.0, =0.0.5, =0.3.0, =0.0.9, =0.2.0, =0.3.1 Source cves: CVE-2022-46149 Source advisory: OSV:GHSA-QQFF-4VW4-F6HX...

Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5752-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5752-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-fr...

bioyino-metric (>=0.1.0 <=0.2.0), capnp-futures (>=0.10.0 <=0.12.0) +12 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1 <=0.12.4)

capnp CARGO version =0.0.1, =0.1.0, =0.10.0, =0.0.1, =0.0.1, =0.2.8, =1.0.0, =0.0.5, =0.3.0, =0.0.9, =0.2.0, =0.3.1 Source cves: CVE-2022-46149 Source advisory: OSV:RUSTSEC-2022-0068...

PT-2022-6041 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.11 Description: The issue is related to the WILC1000 wireless driver in the Linux kernel, where missing validation of IEEE80211 P2P ATTR CHANNEL LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c can...

SUSE-SU-2022:4037-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005993 fixes one issue. The following security issue was fixed: - CVE-2022-42722: Fixed crash in beacon protection for P2P-device. bsc1204125...

SUSE-SU-2022:4034-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005990 fixes several issues. The following security issues were fixed: - CVE-2022-2588: Fixed use-after-free in clsroute bsc1202096. - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anonvma double reuse bnc1204168. - CVE-2022-42722:...

GSD-2022-1007327 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

GSD-2022-1007153 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.74 by commit...