Threats tagged 'ghsa-4h8m-mf3v-vw8j'

P-Net versions prior to 1.0.3 contain a vulnerability in the pf_eth_recv() function where the length of a received Ethernet frame is not properly validated before accessing certain fields. This improper validation, especially in the VLAN tag processing loop without an upper bound, can lead to reading beyond the receive buffer. Such out-of-bounds reads may cause a denial of service (crash) or unintended disclosure of memory contents.