PT-2020-22215

Name of the Vulnerable Software and Affected Versions Wireshark affected versions not specified Description The issue is related to a global buffer overflow read of 8 bytes. Technical details about the crash state indicate involvement of the dissect wassp sub tlv and dissect wassp tlv functions. ...

Linux kernel buffer overflow vulnerability (CNVD-2020-37934)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The 'mwifiexcmdappendvsietlv' function in the drivers/net/wireless/marvell/mwifiex/scan.c file in versions of the Linux kernel prior to 5.5.4 has a buffer overflow...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

PT-2020-3069

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.5.4 Description The issue is related to the mwifiex cmd append vsie tlv function in the Marvell WiFi driver of the Linux kernel, which allows local users to gain privileges or cause a denial of service due to a...

Wireshark Buffer Overflow Vulnerability (CNVD-2020-03533)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer overflow vulnerability exists in dissectwasspsubtlv in version 3.2.x prior to...

DEBIAN-CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...

CVE-2019-5038

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

Stack overflow

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

CVE-2019-5038: Stack-based Buffer Overflow

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

PT-2019-17424

Name of the Vulnerable Software and Affected Versions Weave tool affected versions not specified Description A command execution issue exists in the print-tlv command of the Weave tool. It can be triggered by a specially crafted Weave TLV, leading to a stack-based buffer overflow and code...

Nest Labs Openweave Weave tool Print-TLV code execution vulnerability

Summary An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted...

CVE-2019-1901 Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...

PT-2019-16115

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound write in the rw t2t handle tlv detect rsp function of rw t2t ndef.cc due to a missing bounds check. This could lead to local escalation of privilege wit...

Linux kernel null pointer dereference vulnerability (CNVD-2019-38265)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in Linux kernel versions prior to 4.20.15. The vulnerability stems fr...

UBUNTU-CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfcllcpbuildgb in net/nfc/llcpcore...

Exploring botnets in VR

By Asaf Nadler & Lior Lahav Botnets often use domain generation algorithms DGAs to select a domain name, which bots use to establish communication channels with their command and control servers C2. Since Akamai analyzes over 2.2 trillion DNS requests per day, and detects thousands of active...