CVE-2023-34358: Out-of-bounds Read

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

Moderate Photon OS Security Update - PHSA-2023-3.0-0623

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-3.0-0621

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'openldap' packages of Photon OS have been released...

PT-2023-4045 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U affected versions not specified Description: The issue is related to an unauthenticated DoS condition in the httpd component of the ASUS RT-AX88U router. A remote attacker can send a specially crafted request containing a specif...

Important Photon OS Security Update - PHSA-2023-5.0-0059

Updates of 'linux', 'wireshark', 'linux-secure', 'linux-esx', 'linux-rt', 'pcre2' packages of Photon OS have been released...

PT-2023-5282 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U affected versions not specified Description: The issue is related to the use of externally controllable format strings within the Advanced Open VPN function of the ASUS RT-AX88U router. An authenticated remote attacker can explo...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

Important Photon OS Security Update - PHSA-2023-4.0-0436

Updates of 'linux-aws', 'linux-secure', 'openssl', 'wireshark', 'grub2', 'linux-rt' packages of Photon OS have been released...

RHEL 8 : kernel-rt (RHSA-2023:4255)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4255 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2023-35087

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35086

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. A remote attacker with administrator privilege can exploit...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. An unauthenticated remote attacker without privilege can...

CVE-2023-35087

Summary (CVE-2023-35087) A format string vulnerability affects ASUS RT-AX56U V2 (v3.0.0.4.386_50460) and RT-AC86U (v3.0.0.4_386_51529) in the AiMesh subsystem. The issue arises from lack of input validation for a value passed to the function cm_processChangedConfigMsg within ccm_processREQ_CHANGE...

CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35086

A format-string vulnerability exists in ASUS RT-AX56U V2 and RT-AC86U within the httpd module’s detwan.cgi, triggered by untrusted input passed to a syslog-enabled path (logmessage_normal). The GitHub PoC describes firmwares ≤ RT-AX56U V2 3.0.0.4.386_50460 and RT-AC86U 3.0.0.4_386_51529 as affect...

CVE-2023-35086 ASUS RT-AX56U V2 & RT-AC86U - Format String -1

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. A remote attacker with administrator privilege can exploit...

CVE-2023-35086 ASUS RT-AX56U V2 & RT-AC86U - Format String -1

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. A remote attacker with administrator privilege can exploit...

CVE-2023-35087: Use of Externally-Controlled Format String

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35086: Use of Externally-Controlled Format String

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. A remote attacker with administrator privilege can exploit...