Design/Logic Flaw

In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a shell and getting full access to the...

CVE-2022-36585

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...

CVE-2022-36585

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...

CVE-2022-36585

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...

Buffer overflow

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...

Tenda G3 安全漏洞

Tenda G3 is a Qos Vpn router from Tenda, China. A security vulnerability exists in the Tenda G3 firmware version USG3V3.0brV15.11.0.67663ENTDE, which originates from a buffer overflow due to sscanf in the addDhcpRule function in its httpd binary component...

CVE-2022-36584

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf...

CVE-2022-36584

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf...

CVE-2022-36584

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf...

Buffer overflow

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf...

CVE-2022-36584

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, the getsinglepppuser function has a buffer overflow caused by sscanf...

Tenda G3 安全漏洞

Tenda G3 is a Qos Vpn router from Tenda, China. A security vulnerability exists in the Tenda G3 USG3V3.0brV15.11.0.67663ENTDE version, which originates from a buffer overflow due to the presence of sscanf in the getsinglepppuser function...

CVE-2021-46393

There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack...

CLSA-2021-1635459174 Fix CVE(s): CVE-2021-22925

SECURITY UPDATE: TELNET stack contents disclosure again - debian/patches/CVE-2021-22925.patch: check sscanf for correct number - of matches in lib/telnet.c - CVE-2021-22925...

Fix of CVE: CVE-2021-22898

check sscanf for correct number of matches CVE-2021-22898...

ALPINE-CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

Stack overflow

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

TELNET stack contents disclosure again

curl supports the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl. This rarely used option is used to send variable=content pairs to TELNET servers. Due to flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on uninitialized data from a stack bas...