Lucene search
K

11 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/13 8:36 p.m.3 views

CVE-2026-3557

Philips Hue Bridge happairverifyhandler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit th...

8CVSS6.3AI score0.00495EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2026/03/06 12:0 a.m.3 views

(Pwn2Own) Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8CVSS6.1AI score0.00495EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/06 12:0 a.m.1 views

PT-2026-23775

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge affected versions not specified Description The Philips Hue Bridge contains a heap-based buffer overflow in the hap pair verify handler function during Sub-TLV parsing. This issue could allow for remote code execution. The...

8CVSS7.8AI score0.00495EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-2425

Malware in sbrugna...

3.3CVSS5.9AI score0.01052EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2023/07/19 2:3 a.m.4 views

SUSE CVE-2023-3748

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory...

6.2CVSS6.5AI score0.00662EPSS
Exploits0References5
CNVD
CNVD
added 2020/01/19 12:0 a.m.3 views

Wireshark Buffer Overflow Vulnerability (CNVD-2020-03533)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer overflow vulnerability exists in dissectwasspsubtlv in version 3.2.x prior to...

7.5CVSS7.8AI score0.03242EPSS
Exploits1References1
OSV
OSV
added 2013/03/07 3:55 p.m.1 views

DEBIAN-CVE-2013-2479

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

3.3CVSS7.4AI score0.01052EPSS
Exploits0References1
OSV
OSV
added 2013/03/07 3:55 p.m.5 views

CVE-2013-2479

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

5.6AI score
Exploits0References9
Prion
Prion
added 2013/03/07 3:55 p.m.11 views

Code injection

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

3.3CVSS6.9AI score0.01052EPSS
Exploits0References9Affected Software2
OSV
OSV
added 2013/03/07 3:55 p.m.1 views

UBUNTU-CVE-2013-2479

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

3.3CVSS6.6AI score0.01052EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2013/03/07 3:0 p.m.19 views

CVE-2013-2479

The dissectmplsechotlvddmap function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via invalid Sub-tlv data...

3.3CVSS5AI score0.01052EPSS
Exploits0
Rows per page
Query Builder