CVE-2024-39431

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39432

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39432

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39432

CVE-2024-39432 affects Unisoc UMTS RLC driver; root cause is a missing bounds check causing an out-of-bounds read. According to Red Hat and NVD entries, this can lead to remote DoS with system privileges. PT-2024-9414 adds that exploitation could enable remote code execution and full system compr...

CVE-2024-39431

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39431

The CVE-2024-39431 issue affects Unisoc chipsets’ UMTS RLC driver, where a missing bounds check can cause an out-of-bounds write. This can lead to remote denial of service with system privileges. Public references confirm the vulnerable component as the UMTS RLC driver and describe the exploit su...

CVE-2024-39431

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

[SECURITY] Fedora 38 Update: ofono-1.34-4.fc38

oFono.org is a place to bring developers together around designing an infrastructure for building mobile telephony GSM/UMTS applications. oFono includes a high-level D-Bus API for use by telephony applications. oFono also includes a low-level plug-in API for integrating with telephony stacks,...

SUSE CVE-2015-8712

The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service application crash via a crafted packet...

SUSE CVE-2016-7178

epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service invalid write access and application crash via a crafted packet...

SUSE CVE-2018-7334

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umtsmac.c by rejecting a certain reserved value...

Mageia: Security Advisory (MGASA-2016-0223)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-45815

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting XSS vulnerability...

Cross site scripting

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-45815

CVE-2021-45815 affects Quectel UC20 UMTS/HSPA+ UC20 6.3.14. CNNVD describes a Cross Site Scripting (XSS) vulnerability arising from lack of valid filtering and escaping of the basicname in password_clip.cgi. No explicit exploit status or patch is provided in the connected documents; remediation d...

CVE-2021-45815

Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting XSS vulnerability...

SUSE: Security Advisory (SUSE-SU-2016:2212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-7334

A denial of service flaw was found in the UMTS MAC dissector in Wireshark. A remote network attacker could potentially use this flaw to crash Wireshark by tricking it into processing a crafted packet...

Debian DSA-4217-1 : wireshark - security update

It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc...

Updated wireshark packages fix security vulnerabilities

The SIGCOMP dissector could crash CVE-2018-7320. Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router, S7COMM, SCCP, Thread, Thrift, USB, and WCCP dissectors were susceptible...