PatchTheCVECVEs published by rt-labs
CVEs published by rt-labs (CVE Numbering Authority). 11 tracked.
- CVE-2026-115793 HIGH 8.7 P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interfa
- CVE-2026-115795 MEDIUM 5.3 P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading
- CVE-2026-115794 LOW 2.3 P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length f
- CVE-2026-111732 CRITICAL 9.3 P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of
- CVE-2026-112200 HIGH 8.7 P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request
- CVE-2026-111736 HIGH 8.7 P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read requ
- CVE-2026-111733 HIGH 8.7 P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid targe
- CVE-2026-111731 HIGH 8.7 P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with su
- CVE-2026-111735 HIGH 7.1 P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind()
- CVE-2026-111734 HIGH 7.1 P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading t
- CVE-2026-111730 HIGH 7.2 P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer()