Skip to content
OpenAdvisories

Weakness (CWE)

CWE-198: Use of Incorrect Byte Ordering

Variant Draft

The product receives input from an upstream component, but it does not account for byte ordering (e.g. big-endian and little-endian) when processing the input, causing an incorrect number or value to be used.

Source: MITRE CWE-198

3 results · Feed

  • High 7.5

    flow_dissector: do not dissect PPPoE PFC frames

    In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT RECOMMENDED for PPPoE. In practice, pppd does not support negotiating PF…

  • High 7.5

    Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message

    A Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a BGP update is received over an estab…

  • High 7.5

    Soundness issue in raw-cpuid

    An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.