CVE-2022-40527

CVE-2022-40527 is described as a Transient Denial of Service caused by a reachable assertion in WLAN when processing PEER ID populated by TQM. Multiple sources (NVD entry and various security catalogs) list a NETWORK attack vector with no required user interaction, and a high availability impact ...

CVE-2022-40527 Reachable Assertion in WLAN Embedded SW

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM...

PT-2023-13812 · Qualcomm · Snapdragon +95

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS caused by a reachable assertion in WLAN while processing PEER ID populated by TQM...

SUSE CVE-2020-11810

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...

PT-2022-35109 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the wifi ath11k driver in the Linux Kernel. It is noted that the problem occurs when disconnected, specifically with an issue finding a peer with peer id 0. The actual...

GHSA-WC36-XGCC-JWPR Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`

Affected versions of this crate did not check that the public key the signature was created with matches the peer ID of the peer record. Any combination was considered valid. This allows an attacker to republish an existing PeerRecord with a different PeerId...

Injection Vulnerability

openvpn is vulnerable to injection vulnerabilities. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id...

FreeBSD : openvpn -- illegal client float can break VPN session for other users (8604121c-7fc2-11ea-bcac-7781e90b0c8f)

Lev Stipakov and Gert Doering report : There is a time frame between allocating peer-id and initializing data channel key which is performed on receiving push request or on async push-reply in which the existing peer-id float checks do not work right. If a 'rogue' data channel packet arrives duri...