Lucene search
+L

7 matches found

AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•18 views

Astra Linux – Vulnerability in connman

In ConnMan version 1.41, remote attackers who can send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute arbitrary code...

9.8CVSS8.3AI score0.03187EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/09/08 12:00 a.m.•100 views

(Pwn2Own) ConnMan received_data Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installation of ConnMan. Authentication is not required to exploit this vulnerability. The specific flaw exists within the receiveddata method. Crafted data in a HTTP response can trigger a write past the e...

6.3CVSS1.4AI score0.03187EPSS
SaveExploits0References1
Mend
Mend
•added 2022/08/03 12:00 a.m.•2 views

CVE-2022-32292

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...

9.8CVSS0.03187EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/03 12:00 a.m.•6 views

CVE-2022-32292: Out-of-bounds Write

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...

9.8CVSS8AI score0.03187EPSS
SaveExploits0References2
OSV
OSV
•added 2020/11/13 4:15 p.m.•43 views

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

7.5CVSS6.9AI score
SaveExploits0References2
Mend
Mend
•added 2020/11/13 3:03 p.m.•2 views

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

8.7CVSS0.02791EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/13 12:00 a.m.•5 views

CVE-2020-6019: Uncaught Exception

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

7.5CVSS5.7AI score0.02791EPSS
SaveExploits1References2
Rows per page
Query Builder