9 results · Feed
-
Medium 5.3
lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send frag…
-
Medium 5.9
lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler
lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answer…
-
Critical 9.8
Savannah lwIP SMTP client Classic Buffer Overflow
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
-
High 8.8
Double Free in lwIP (lightweight IP)
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
-
Critical 9.8
Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.
-
Critical 9.8
lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-b…
-
Unscored —
A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version an…
-
Unscored —
A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation …
-
Critical 9.8
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.