CVE-2023-30378

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30373: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30371: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "subED14" contains a stack-based buffer overflow vulnerability...

CVE-2023-30372: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, The function "xkjsver32" contains a stack-based buffer overflow vulnerability...

CVE-2023-30376: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "henanpppoeuser" contains a stack-based buffer overflow vulnerability...

CVE-2023-30375: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability...

CVE-2023-30370: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability...

CVE-2023-30378: Out-of-bounds Write

In Tenda AC15 V15.03.05.19, the function "sub8EE8" contains a stack-based buffer overflow vulnerability...

CVE-2023-30376

CVE-2023-30376 concerns a stack-based buffer overflow in the function henan_pppoe_user of the router firmware for Tenda AC15 V15.03.05.19 . The vulnerability is characterized as a network-exploitable issue with a base score of 9.8 (CRITICAL) under CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). T...

CVE-2023-30370

CVE-2023-30370 affects the Tenda AC15 router specifically version V15.03.05.19. The vulnerability is a stack-based overflow in the GetValue function, which can lead to complete compromise of affected devices. The CVE’s published metrics indicate a 9.8/10 CRITICAL base score with network access re...

PT-2023-22664

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the henan pppoe user function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the henan pppoe user functi...

PT-2023-22663

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the getIfIp function. This vulnerability can potentially be exploited, but no information is provided about the estimated number ...

PT-2023-22665

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the sub 8EE8 function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the sub 8EE8 function as a temporar...

PT-2023-22662

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the xian pppoe user function. Recommendations For Tenda AC15 version 15.03.05.19, consider disabling the xian pppoe user function...

PT-2023-22659

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description The issue is related to a stack-based buffer overflow vulnerability in the GetValue function. This vulnerability can be exploited, potentially leading to unauthorized access or code execution. However...

(Pwn2Own) Oracle VirtualBox TPM MMIO Handling Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

Debian: Security Advisory (DLA-3397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...

CVE-2023-27355: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6026-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6026-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal...