1517 matches found
Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2024-016-01)
The version of gnutls installed on the remote host is prior to 3.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-016-01 advisory. - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from...
Tenda i29 Buffer Overflow Vulnerability
The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the pingIp parameter in the pingSet function failing to properly validate the length of the input data, which can be exploited by a remote attacker to...
TOTOLINK N350RT Buffer Overflow Vulnerability
The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. The TOTOLINK N350RT suffers from a buffer overflow vulnerability, which originates from the parameter v33 of the function main in /cgi-bin/cstecgi.cgi?action=login&flag=1 that fails to correctly validate the length...
Siemens SCALANCE OpenSSL Out-of-bounds Read (CVE-2022-4203)
A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...
CVE-2023-42941
The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker in a privileged network position may be able to perform a denial-of-service attack using crafted Bluetooth packets...
CVE-2023-42941
The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker in a privileged network position may be able to perform a denial-of-service attack using crafted Bluetooth packets...
Amazon Linux 2 : squid (ALAS-2024-2382)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2382 advisory. 2024-02-29: CVE-2024-25617 was added to this advisory. 2024-02-29: CVE-2023-49285 was removed from this advisory. 2024-02-29: The...
Tenda i29 wifiRadioSetIndoor method buffer overflow vulnerability
The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the bandwidth parameter of the wifiRadioSetIndoor method failing to correctly validate the length of the input data, which can be exploited by a remot...
Tenda i29 sysLogin Method Buffer Overflow Vulnerability
The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the time parameter of the sysLogin method not properly validating the length of the input data, which can be exploited by a remote attacker to execute...
Tenda i29 lanCfgSet Method Buffer Overflow Vulnerability
The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the lanGw parameter of the lanCfgSet method failing to correctly validate the length and size of the input data, which can be exploited by a remote...
Meet the entirely legal, iPhone-crashing device, the Flipper Zero: Lock and Code S04E25
This week on the Lock and Code podcast… It talks, it squawks, it even blocks! The stocking-stuffer on every hobby hacker’s wish list this year is the Flipper Zero. “Talk” across low-frequency radio to surreptitiously change TV channels, emulate garage door openers, or even pop open your friend’s...
About the security content of iOS 17.2 and iPadOS 17.2
About the security content of iOS 17.2 and iPadOS 17.2 This document describes the security content of iOS 17.2 and iPadOS 17.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
CVE-2023-6481
A flaw was found in the logback package. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the logback receiver component. This flaw allows an attacker to mount a denial-of-service attack by sending poisoned data. Mitigation Mitigation...
FreeBSD : FreeBSD -- TCP spoofing vulnerability in pf(4) (9cbbc506-93c1-11ee-8e38-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9cbbc506-93c1-11ee-8e38-002590c1f29c advisory. - As part of its stateful TCP connection tracking implementation, pf performs sequence number validatio...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Redis vulnerabilities (USN-6531-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6531-1 advisory. Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled certain specially crafted Lua scripts. An...
CVE-2023-49285
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...
Tenda i6 wifiSSIDget component buffer overflow vulnerability
Tenda i6 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i6 version V1.0.0.83856, which originates from a boundary error in the component /goform/wifiSSIDget when handling untrusted input. A remote attacker could exploit this vulnerability to execute...
Tenda AC10 sub_49E098 function buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from the list parameter of the sub49E098 function failing to correctly validate the length of the input data, and can be...
Tenda AC10 sub_47D878 function buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the sub47D878 function's src parameter failing to correctly validate the length of the input data, which can be exploited by a remote attacker to...
