Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7xg3-5hhv-932f

Опубликовано: 15 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.

While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.

While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

EPSS

Процентиль: 92%
0.07849
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

CVSS3: 8.3
fstec
около 4 лет назад

Уязвимость подсистемы ядра net80211 операционных систем FreeBSD, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 92%
0.07849
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94