Threats tagged 'ghsa-88cc-w8xr-wfmh'

P-Net versions prior to 1.0.4 contain a vulnerability where the application relationship of an RPC session is aborted if a fragment of a response is resent without acknowledgment. This occurs due to a NULL pointer dereference when handling fragmented responses on sessions without an application relationship, causing the device to crash. Exploitation requires the attacker to have observed the Application Relationship UUID and have adjacent network access. Conformant IO-controllers do not send such requests, limiting exposure.