CentOS 7 : linux-firmware (RHSA-2024:3939)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3939 advisory. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation ...

Tenda AX1806 Buffer Overflow Vulnerability (CNVD-2024-35918)

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AX1806 v1.0.0.1, which stems from the program failing to properly validate the length and size of input data, and can be exploited by an attacker to cause a denial of service...

USN-6896-5 linux-aws, linux-aws-5.4, linux-iot vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

USN-6896-5: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

Tenda O3 fromVirtualSet function buffer overflow vulnerability (CNVD-2024-33692)

Tenda O3 is an outdoor wireless bridge from Tenda, China. A security vulnerability exists in the Tenda O3, which stems from a stack-based buffer overflow due to manipulation of the ip/localPort/public Port/app parameter in the fromVirtualSet function. No details of the vulnerability are available...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6896-5)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-5 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...

Tenda O3 formQosSet function buffer overflow vulnerability

The Tenda O3 is a wireless bridge device designed to extend and enhance wireless network signals for home and small business network environments. The Tenda O3 suffers from a stack-based buffer overflow vulnerability that stems from the fact that the operation of the parameter...

The vulnerability of the modifyDhcpRule function in the /goform/modifyDhcpRule software for the Tenda G3 wireless access point allows a hacker to execute arbitrary code.

The vulnerability of the modifyDhcpRule function in the /goform/modifyDhcpRule microprogramming system for the Tenda G3 wireless access point is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POS...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6893-3)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6893-3 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

SUSE-SU-2024:2575-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2023-38417: Fixed improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 bsc1225600 - CVE-2023-47210: Fixed improper input validation for some IntelR PROSet/Wireless WiFi software...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. A security vulnerability exists in Tenda O3, which stems from the manipulation of the parameter cmdinput in the function formexeCommand can lead to a stack-based buffer overflow, which could allow remote launch of an attack. No detailed...

USN-6896-4: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

NETGEAR RAX30 Stack Buffer Overflow Vulnerability (CNVD-2024-33904)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR WN604 Information Disclosure Vulnerability

The NETGEAR WN604 is a small wireless router from NETGEAR. The NETGEAR WN604 suffers from an information disclosure vulnerability that originates in the parameter file of file/downloadFile.php, which is not sufficiently protected for sensitive information and can be exploited by an attacker to...

The vulnerability of the wireless adapter for Xbox Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the wireless adapter in Xbox Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious link or malicious file...

D-Link DAP-1325 Command Injection Vulnerability (CNVD-2024-33899)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

D-Link DAP-1325 Command Injection Vulnerability (CNVD-2024-33898)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

D-Link DAP-1325 Stack Buffer Overflow Vulnerability (CNVD-2024-33901)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

D-Link DAP-1325 Command Injection Vulnerability (CNVD-2024-33903)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

Tenda AX1806 Buffer Overflow Vulnerability (CNVD-2024-38182)

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter list when processing untrusted input. An attacker could exploit this vulnerability to cause a denial of...