CVE-2024-25391

A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...

CVE-2024-24335

The RT-Thread real-time operating system (RTOS) is vulnerable to a heap buffer overflow in the dfs_v2 romfs filesystem, affecting versions 5.0.2 and earlier . The root cause is a failure to properly validate the length size of input data . This vulnerability could be exploited by remote attackers...

RHEL 9 : kernel-rt (RHSA-2024:1533)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1533 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2024-24334

A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

CVE-2024-25391

A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...

CVE-2024-25393

A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...

RT-Thread security vulnerabilities

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from a heap-based buffer overflow in drivers/wlan/wlanmgmt.c. The vulnerability is caused by the presence of a heap-based buffer...

RT-Thread security vulnerabilities

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...

RT-Thread security vulnerabilities

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which originates from a buffer-based overflow in utilities/rt-link/src/rtlink.c. The vulnerability is caused by the presence of a buffer-based...

CVE-2024-24334

The RT-Thread open-source IoT real-time operating system (RTOS) is vulnerable to a heap buffer overflow in the dfs_v2 dfs_file function (versions through 5.0.2). The root cause is a failure to properly validate the length size of input data . A remote attacker could exploit this to execute arbitr...

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25389

The RT-Thread real-time operating system (RTOS) versions through 5.0.2 are vulnerable to the use of a cryptographically weak pseudo-random number generator (PRNG) . The flaw resides in the calc_random function located in drivers/misc/rt_random.c, where the algorithm seed = 214013L * seed + 253101...

CVE-2024-25391

A stack buffer overflow vulnerability exists in the RT-Thread RTOS (an open-source IoT real-time operating system) affecting versions through 5.0.2 . The flaw is located in the libc/posix/ipc/mqueue.c file. This vulnerability allows for potential memory corruption due to improper handling of data...

CVE-2024-25395

A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...

CVE-2024-25388

drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...

CVE-2024-25393

The RT-Thread open-source IoT real-time operating system (RTOS) is affected by a stack buffer overflow vulnerability in the net/at/src/at_server.c file. The root cause is the component's failure to properly validate the length size of input data . This flaw can be exploited by remote attackers to...

CVE-2024-25390

A heap-based buffer overflow vulnerability exists in the RT-Thread RTOS, specifically affecting versions through 5.0.2 . The flaw is located within the finsh/msh_file.c and finsh/msh.c components. This vulnerability allows for potential memory corruption or other impacts resulting from the heap o...

Important Photon OS Security Update - PHSA-2024-4.0-0584

Updates of 'file', 'nss', 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

CVE-2024-29916

The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the ke...