Lucene search
+L

25704 matches found

OSV
OSV
added 2024/11/19 6:15 p.m.1 views

DEBIAN-CVE-2024-53043

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

5.5CVSS5.6AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/19 6:15 p.m.17 views

UBUNTU-CVE-2024-53043

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

5.5CVSS6.2AI score0.00245EPSS
SaveExploits0References19
CVE
CVE
added 2024/11/19 5:19 p.m.157 views

CVE-2024-53043

CVE-2024-53043 : Linux kernel vulnerability in mctp i2c handling NULL header address. The issue arises when daddr can be NULL if there is no neighbour table entry, in which case the tx packet should be dropped; saddr may be NULL if a different protocol transmits a packet. This could affect transm...

5.5CVSS5.3AI score0.00245EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/11/19 1:30 a.m.20 views

CVE-2024-50297 net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets in dql after dma engine starts causes race condition. Tx transfer starts once dma engine is started and may execute dql dequeue in completion...

7.5CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/19 12:00 a.m.10 views

PT-2024-9120 · Quic-Go +1 · Quic-Go +1

Name of the Vulnerable Software and Affected Versions: quic-go versions prior to 0.48.2 Description: An off-path attacker can inject an ICMP Packet Too Large packet, disrupting a QUIC connection by setting the MTU value to smaller than 1200 bytes. This can be done after the handshake completion,...

8.1CVSS5.7AI score0.03027EPSS
SaveExploits3References49
NVD
NVD
added 2024/11/18 10:15 a.m.37 views

CVE-2024-42391

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

5.3CVSS0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/18 10:15 a.m.28 views

CVE-2024-42390

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

5.3CVSS0.00281EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 a.m.44 views

CVE-2024-42389

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

5.3CVSS0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 a.m.104 views

CVE-2024-42388

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

5.3CVSS0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 a.m.33 views

CVE-2024-42387

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

5.3CVSS0.00309EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 10:15 a.m.38 views

CVE-2024-42386

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application...

8.2CVSS0.00378EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/18 10:15 a.m.28 views

CVE-2024-42384

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application...

7.5CVSS0.00481EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/18 9:07 a.m.46 views

CVE-2024-42391 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

4.3CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/18 9:07 a.m.73 views

CVE-2024-42391

Cesanta Mongoose Web Server v7.14 is affected by CVE-2024-42391 due to an out-of-range pointer offset in the TLS handling, which may allow an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. The issue is documented across multiple sources (...

5.3CVSS4.6AI score0.00283EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/11/18 9:07 a.m.18 views

CVE-2024-42391 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

4.3CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/18 9:07 a.m.14 views

CVE-2024-42391 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

4.3CVSS7.1AI score0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 9:06 a.m.16 views

CVE-2024-42390 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

4.3CVSS7.1AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/18 9:06 a.m.21 views

CVE-2024-42390 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

4.3CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2024/11/18 9:06 a.m.76 views

CVE-2024-42390

CVE-2024-42390 concerns Cesanta Mongoose Web Server, specifically version 7.14. The vulnerability stems from an out-of-range pointer offset that can cause the server to process a malicious TLS packet and read unintended heap memory space. Documents consistently describe the affected component as ...

5.3CVSS4.6AI score0.00281EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/18 9:06 a.m.80 views

CVE-2024-42389

CVE-2024-42389 affects Cesanta Mongoose Web Server, specifically v7.14. The issue is described as an Out-of-range Pointer Offset vulnerability that can be triggered by a crafted TLS packet, causing the application to read unintended heap memory. The NVD entry lists a CVSSv3.1 base score of 5.3 (M...

5.3CVSS5.2AI score0.00309EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder