Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47488 State: PUBLISHED Published: 2023-05-09T01:20:34.945Z Last Updated: 2025-01-28T21:22:47.103Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47489 State: PUBLISHED Published: 2023-05-09T01:20:41.613Z Last Updated: 2025-01-28T21:14:14.452Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47490 State: PUBLISHED Published: 2023-05-09T01:20:36.111Z Last Updated: 2025-01-28T21:20:21.419Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47491 State: PUBLISHED Published: 2023-05-09T01:20:42.875Z Last Updated: 2025-01-28T21:13:01.426Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47492 State: PUBLISHED Published: 2023-05-09T01:20:37.236Z Last Updated: 2025-01-28T21:18:20.069Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47493 State: PUBLISHED Published: 2023-05-09T01:20:38.340Z Last Updated: 2025-01-28T21:17:03.721Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47494 State: PUBLISHED Published: 2023-05-09T01:20:44.034Z Last Updated: 2025-01-28T21:12:13.718Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47495 State: PUBLISHED Published: 2023-05-09T01:20:45.141Z Last Updated: 2025-01-28T20:42:30.480Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47496 State: PUBLISHED Published: 2023-05-09T01:20:46.243Z Last Updated: 2025-01-28T20:41:41.878Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47497 State: PUBLISHED Published: 2023-05-09T01:20:47.368Z Last Updated: 2025-01-28T20:41:00.980Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47498 State: PUBLISHED Published: 2023-05-09T01:20:48.403Z Last Updated: 2025-01-28T20:40:16.004Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47499 State: PUBLISHED Published: 2023-05-09T01:20:49.457Z Last Updated: 2025-01-28T20:39:16.292Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-47500 State: PUBLISHED Published: 2022-12-19T10:03:41.428Z Last Updated: 2025-04-17T14:22:18.663Z Vendors: Apache Software Foundation Products: Apache Helix Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/lr74xtxxbb1t3dfn5qzzwl2xjr3qlbmh
CVE ID: CVE-2022-47501 State: PUBLISHED Published: 2023-04-14T15:01:31.987Z Last Updated: 2025-02-13T16:34:00.709Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-22 Description: Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/k8s76l0whydy45bfm4b69vq0mf94p3wc - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - http://www.openwall.com/lists/oss-security/2023/04/18/5 -
e.org/download.html - https://ofbiz.apache.org/security.html - http://www.openwall.com/lists/oss-security/2023/04/18/5 - http://www.openwall.com/lists/oss-security/2023/04/18/9 - http://www.openwall.com/lists/oss-security/2023/04/19/1 - http://www.openwall.com/lists/oss-security/2023/04/19/6
CVE ID: CVE-2022-47502 State: PUBLISHED Published: 2023-03-24T15:57:28.611Z Last Updated: 2025-02-13T16:34:01.266Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: CWE-20, CWE-88 Description: Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject to user approval. In the affected versions of OpenOffice, approval for certain links is not requested; when activated, such links could therefore result in arbitrary script execution. Additional Analyst Notes: - CVE Pro
ed; when activated, such links could therefore result in arbitrary script execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/xr6tl91jj2jgcq8pdbrc4d8w13s6xn80 - https://www.openoffice.org/security/cves/CVE-2022-47502.html - http://www.openwall.com/lists/oss-security/2023/12/28/3 - http://www.openwall.com/lists/oss-security/2024/01/03/3
CVE ID: CVE-2022-47503 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:13:30.988Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-502 Description: SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47503 - https://documentation.solarwinds.com/en/suc
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47503 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm
CVE ID: CVE-2022-47504 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:13:09.012Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-502 Description: SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_re
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47504
CVE ID: CVE-2022-47505 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:01:48.149Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-269 Description: The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm - http
solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/cve-2022-47505
CVE ID: CVE-2022-47506 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:12:30.042Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-22 Description: SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_
nt: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47506
CVE ID: CVE-2022-47507 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:12:04.989Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-502 Description: SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_re
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47507
CVE ID: CVE-2022-47508 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:11:45.491Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SolarWinds Products: Server & Application Monitor (SAM) Problem Types: CWE-287 Description: Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 - https://documentation.solarwinds.com/
es: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47508 - https://documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2023-1_release_notes.htm
CVE ID: CVE-2022-47509 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-04T21:11:36.903Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-79 Description: The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47509
CVE ID: CVE-2022-47512 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-15T17:57:28.578Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SolarWinds Products: Hybrid Cloud Observability (HCO)/ SolarWinds Platform Problem Types: CWE-312 Description: Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO)/ SolarWinds Platform 2022.4. No other versions are affected Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwin
hment: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-4-1_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47512
CVE ID: CVE-2022-47514 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T15:35:12.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, as demonstrated by a pingback.aspx POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://papercutsoftware.github.io/XML-RPC.NET/download.html - https://github.com/jumpycastle/xmlrpc.net-poc
CVE ID: CVE-2022-47515 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T15:04:37.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a long message in a TCP request that leads to std::length_error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drachtio/drachtio-server/issues/245 - https://github.com/drachtio/drachtio-server/commit/4cf9fe2c420b86c16442215d449d40be777c1911
CVE ID: CVE-2022-47516 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T18:54:54.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drachtio/drachtio-server/issues/244 - https://github.com/davehorton/sofia-sip/commit/13b2a135287caa2d67ac6cd5155626821e25b377 - https://lists.debian.org/debian-
tps://github.com/davehorton/sofia-sip/commit/13b2a135287caa2d67ac6cd5155626821e25b377 - https://lists.debian.org/debian-lts-announce/2023/02/msg00028.html - https://www.debian.org/security/2023/dsa-5410
CVE ID: CVE-2022-47517 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T18:51:28.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/drachtio/drachtio-server/issues/243 - https://github.com/davehorton/sofia-sip/commit/22c1bd191f0acbf11f0c0fbea1845d9bf9dcd47e - https://github.com/da
es/243 - https://github.com/davehorton/sofia-sip/commit/22c1bd191f0acbf11f0c0fbea1845d9bf9dcd47e - https://github.com/davehorton/sofia-sip/commit/bfc79d85c8f3a4798a3305fb98f5a11c11d0d29f
CVE ID: CVE-2022-47518 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T15:03:25.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/r/20221123153543.8568-5-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/0cdfa9e6f091
e.kernel.org/r/20221123153543.8568-5-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://security.netapp.com/advisory/ntap-20230113-0007/
CVE ID: CVE-2022-47519 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T15:02:04.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/r/20221123153543.8568-3-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/051ae669e4505
.kernel.org/r/20221123153543.8568-3-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/051ae669e4505abbe05165bebf6be7922de11f41 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://security.netapp.com/advisory/ntap-20230113-0007/
CVE ID: CVE-2022-47520 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T15:00:13.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/r/20221123153543.8568-2-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/cd21d99e595ec1d8721e1058dcdd4
221123153543.8568-2-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/cd21d99e595ec1d8721e1058dcdd4f1f7de1d793 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://security.netapp.com/advisory/ntap-20230113-0007/
CVE ID: CVE-2022-47521 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-17T18:48:33.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/r/20221123153543.8568-4-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/f9
ttps://lore.kernel.org/r/20221123153543.8568-4-philipturnbull%40github.com - https://github.com/torvalds/linux/commit/f9b62f9843c7b0afdaecabbcebf1dbba18599408 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://security.netapp.com/advisory/ntap-20230113-0007/