Threats tagged 'ghsa-9cfr-5cg8-55x5'

P-Net versions before 1.0.4 contain a vulnerability where the software does not properly validate the number of MCR request blocks in a Connect request. This can lead to out-of-bounds writes into adjacent Application Relationship structures. Exploitation requires adjacent network access and no established Application Relationship is needed. Builds with PNET_OPTION_MC_CR disabled are not affected.