wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=4913995862835200 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata nl::wpantund::SpinelAppendA...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=4622880966246400 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata...

EUVD-2021-20562

Malware in sbrugna...

EUVD-2020-29751

Malware in sbrugna...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2020-8916

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=5997508511006720 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=5182789321883648 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata nl::wpantund::SpinelAppendA...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=5765841769070592 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata...

wpantund:wpantund-fuzz: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6701338624393216 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

wpantund:wpantund-fuzz: Stack-use-after-scope in std::__1::__tree_const_iterator<std::__1::__value_type<std::__1::basic_string<ch

Detailed Report: https://oss-fuzz.com/testcase?key=5683462437732352 Project: wpantund Fuzzing Engine: afl Fuzz Target: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffd739e8b60 Crash State: std::1::treeconstiterator, std::1...

Google OpenThread Buffer Overflow Vulnerability

Google OpenThread is an open source implementation of the Thread networking protocol from Google USA. A buffer overflow vulnerability exists in OpenThread wpantund, which stems from an error in the handling of shaped data in the metriclen function. No details of the vulnerability are available at...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

Stack overflow

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-33889

CVE-2021-33889 – OpenThread wpantund buffer overflow caused by an inconsistency in the integer data type for metric_len, leading to a stack-based overflow. Affected component: OpenThread wpantund. According to connected disclosures, this is a buffer overflow vulnerability with potential impact on...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-33889: Out-of-bounds Write

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

PT-2021-20355

Name of the Vulnerable Software and Affected Versions: OpenThread wpantund versions through 2021-07-02 Description: The issue is a stack-based Buffer Overflow caused by an inconsistency in the integer data type for metric len. Recommendations: For versions through 2021-07-02, at the moment, there...

OSV-2017-108 Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::shouldfilteraddress nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted nl::wpantund::SpinelNCPInstance::handlencpspinelcallba...