漏洞标题
N/A
漏洞描述信息
在FreeBSD 12.2-STABLE之前 r365730, 11.4-STABLE之前 r365738, 12.1-RELEASE之前 p10, 11.4-RELEASE之前 p4, 和 11.3-RELEASE之前 p14 的ure(4)设备驱动程序中的一个编程错误导致了某些瑞星USB Ethernet接口在单个USB传输中报告的超过2048字节的 packets 错误地被认为是只有2048字节的长度。攻击者可以利用此漏洞，使驱动程序将大型包的Payload部分误解为一个独立的包，从而在安全边界(如VLAN)上注入 packets。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4) device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes. An adversary can exploit this to cause the driver to misinterpret part of the payload of a large packet as a separate packet, and thereby inject packets across security boundaries such as VLANs.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
FreeBSD 注入漏洞
漏洞描述信息
FreeBSD是Freebsd基金会的一套类Unix操作系统。 FreeBSD 12.2-STABLE 存在安全漏洞，攻击者可利用该漏洞导致驱动程序将大包的部分有效载荷误读为单独的包。
CVSS信息
N/A
漏洞类别
注入