Skip to content
OpenAdvisories

Archive

25 June 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    Path traversal mitigation bypass in OctoRPKI

    ### Impact The existing URI path filters in OctoRPKI (version < 1.4.3) mitigating Path traversal vulnerability could be bypassed by an attacker. In case a malicious TAL file is parsed, it was possible to write files outside the base cache folder. ### Specific…

  • High 7.5

    Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

    ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Sta…