COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling

Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip reliable TCP SOME/IP endpoint grows its receive buffer to an attacker-declared message size before...

EUVD-2024-32545

Malicious code in bioql PyPI...

CVE-2024-3979

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2024-3979

CVE-2024-3979 affects COVESA vsomeip up to version 3.4.10. The issue is a race condition in an unknown functionality, exploitable with local access; public exploit information is noted. Connected documents corroborate a local attack vector and a medium severity (CVSS 3.1: 4.4; CVSS 3.0: 4.4) with...

CVE-2024-3979 COVESA vsomeip race condition

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2024-3979 COVESA vsomeip race condition

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2024-3979 COVESA vsomeip race condition

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

PT-2024-28674

Name of the Vulnerable Software and Affected Versions COVESA vsomeip versions up to 3.4.10 Description A problematic issue has been found, affecting some unknown functionality, which leads to a race condition. The manipulation can be exploited locally. Recommendations For COVESA vsomeip versions ...

CVE-2024-3979: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...