Design/Logic Flaw

In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a shell and getting full access to the...

CVE-2022-2025

CVE-2022-2025 affects Grandstream GSD3710 devices with firmware 1.0.11.13 and earlier. The vulnerability is a stack-based buffer overflow caused by not validating the length of parameters before using strcpy, allowing an attacker who knows valid user credentials to overflow the stack and potentia...

PT-2022-34549

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.326 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations...

PT-2022-34348

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendation...

PT-2022-34461

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendation...

PT-2022-33324

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.19.4 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations F...

PT-2022-33717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.63 Description The issue is related to the initialization of jump labels before the parse early param function is called. The actual impact and potential for attack have not been proven yet. Recommendations...

The vulnerability of the `cgroup1_parse_param` function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cgroup1parseparam function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system is related to the lack of checks to ensure that the source parameter is indeed a string. Exploiting this vulnerability could allow an attacker to access confidential data,...

OSV-2022-840 Negative-size-param in wc_Sha3_256_Final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50953 Crash type: Negative-size-param Crash state: wcSha3256Final wcHash wcRsaPadex...

PT-2022-37756

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50953 Crash type: Negative-size-param Crash state: wc Sha3 256 Final wc Hash wc RsaPad ex...

wolfssl:fuzzer-wolfssl-rsa: Negative-size-param in wc_Sha3_256_Final

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4735758405074944 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-rsa Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash...

OSV-2022-815 Negative-size-param in PackChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50832 Crash type: Negative-size-param Crash state: PackChunkyBytes PrecalculatedXFORM cmsDoTransform...

lcms:cms_universal_transform_fuzzer: Negative-size-param in PackChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4938102635888640 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

CVE-2022-36510

H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

Command injection

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

CVE-2022-36509

H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

PT-2022-23784 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W version MiniGRW1A0V100R006 Description: A command injection issue was discovered via the param parameter at DelL2tpLNSList. Recommendations: For H3C GR-1200W version MiniGRW1A0V100R006, consider restricting access to the...

CVE-2022-36510: Improper Neutralization of Special Elements used in an OS Command

H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

CVE-2022-36509: Improper Neutralization of Special Elements used in an OS Command

H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

CVE-2022-37070: Improper Neutralization of Special Elements used in an OS Command

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...