EUVD-2021-20562

Malware in sbrugna...

EUVD-2020-29751

Malware in sbrugna...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2020-8916

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

Google OpenThread Buffer Overflow Vulnerability

Google OpenThread is an open source implementation of the Thread networking protocol from Google USA. A buffer overflow vulnerability exists in OpenThread wpantund, which stems from an error in the handling of shaped data in the metriclen function. No details of the vulnerability are available at...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

Stack overflow

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-33889

CVE-2021-33889 – OpenThread wpantund buffer overflow caused by an inconsistency in the integer data type for metric_len, leading to a stack-based overflow. Affected component: OpenThread wpantund. According to connected disclosures, this is a buffer overflow vulnerability with potential impact on...

OSV-2017-108 Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::shouldfilteraddress nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted nl::wpantund::SpinelNCPInstance::handlencpspinelcallba...

OSV-2017-91 UNKNOWN READ in spinel_datatype_vunpack_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4790 Crash type: UNKNOWN READ Crash state: spineldatatypevunpack spineldatatypeunpack nl::wpantund::SpinelNCPInstance::handlencpspinelvalueinserted...

Openthread wpantund memory leak vulnerability

Openthread wpantund is a user-space network interface daemon. A security vulnerability exists in Openthread wpantund. An attacker could exploit this vulnerability to cause a service crash denial of service...

CVE-2020-8916

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

CVE-2020-8916

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

Memory corruption

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

CVE-2020-8916

CVE-2020-8916 describes a memory-leak in OpenThread’s wpantund (versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7) when used in environments where wpanctl directly interfaces with the control driver. This can allow an attacker to crash the service (DoS). Affected component: wpantund ...

CVE-2020-8916 Memory leak in wpanctl can lead to DoS

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver eg: debug environments can allow an attacker to crash the service DoS. We recommend updating, or to...

wpantund/wpantund-fuzz: Crash in (__has_construct<std::__1::allocator<unsigned

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5700079681273856 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash...

wpantund/wpantund-fuzz: Heap-use-after-free in TunnelIPv6Interface::remove_address

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5656107263983616 Project: wpantund Fuzzer: aflwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

wpantund/wpantund-fuzz: Crash in spinel_datatype_vunpack_

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=6050841338314752 Project: wpantund Fuzzer: aflwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...