CVE-2020-15054

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

Affected product: TP-Link TL-PS310U (USB Network Server). Vulnerability: Elevation of privilege due to discovery of the administrative password by sniffing unencrypted UDP traffic. Root cause / vector: Unencrypted UDP traffic enables an attacker on the same network to obtain credentials and escal...

CVE-2020-7459

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

CVE-2020-7459

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

CVE-2020-7459

Removed by vendor...

FreeBSD : FreeBSD -- Potential memory corruption in USB network device drivers (9eb01384-d793-11ea-88f8-901b0ef719ab)

A missing length validation code common to these three drivers means that a malicious USB device could write beyond the end of an allocated network packet buffer. Impact : An attacker with physical access to a USB port and the ability to bring a network interface up may be able to use a specially...

FreeBSD -- Potential memory corruption in USB network device drivers

Problem Description: A missing length validation code common to these three drivers means that a malicious USB device could write beyond the end of an allocated network packet buffer. Impact: An attacker with physical access to a USB port and the ability to bring a network interface up may be abl...

FreeBSD-SA-20:21.usb_net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...

September 12, 2017—KB4038788 (OS Build 15063.608)

None None...

DEBIAN-CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...

QEMU USB Net NDIS Integer Overflow Vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in QEMU due to 'rndisqueryresponse', 'rndissetresponse' and 'rndissetresponse' in the /hw/usb/dev-network.c file. ' and...

UBUNTU-CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...