GLSA-202107-24 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-24 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

Design/Logic Flaw

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852

CVE-2021-44852 affects Biostar RACING GT Evo’s BS_RCIO64.sys driver. A low-integrity process can open the driver object and issue IOCTLs (0x226040, 0x226044, 0x226000) to read/write arbitrary physical memory or call an arbitrary address, enabling arbitrary code execution. Affected version: Biosta...

CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

Design/Logic Flaw

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data...

CVE-2020-22061

CVE-2020-22061 affects SUPERAntiSpyware v8.0.0.1050. The issue resides in the driver component saskutil64.sys and permits an attacker with local access to arbitrarily write data to the device via IOCTL 0x9C402140. CVSS data in the record indicates a local, low complexity attack with partial confi...

CVE-2020-22057

CVE-2020-22057 affects EVGA Precision XOC v6.2.7, where WinRin0x64.sys and WinRing0.sys low-level drivers are configured with the default security descriptor, enabling network-adjacent attackers to access sensitive components and data. Root cause is insecure access control on privileged drivers; ...

Dell DBUtilDrv2.sys Memory Protection Modifier

The Dell DBUtilDrv2.sys drivers version 2.5 and 2.7 have a write-what-where condition that allows an attacker to read and write arbitrary kernel-mode memory. This module installs the provided driver, enables or disables LSA protection on the provided PID, and then removes the driver. This would...

virt:rhel and virt-devel:rhel security update

An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

compu (>=0.1.0 <=0.2.0), fie (>=0.16.0 <=0.16.3) +2 more potentially affected by CVE-2020-36846 +1 more via compu-brotli-sys (=0.1.3)

compu-brotli-sys CARGO version =0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on compu-brotli-sys and may be impacted: - compu =0.1.0, =0.16.0, =1.0.0, =1.0.10 Source cves: CVE-2020-36846, CVE-2020-8927 Source advisory: OSV:RUSTSEC-2021-0132...

Fedora: Security Advisory for rust-libsqlite3-sys (FEDORA-2021-f454d8494c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-libsqlite3-sys (FEDORA-2021-3d78d81491)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: rust-libsqlite3-sys-0.23.2-1.fc35

Native bindings to the libsqlite3 library...

[SECURITY] Fedora 34 Update: rust-libsqlite3-sys-0.23.2-1.fc34

Native bindings to the libsqlite3 library...

PT-2021-8174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the thermal component of the Linux kernel. Specifically, when a thermal zone is consuming a thermal sensor and that sensor device...

CVE-2020-22079

Stack-based buffer overflow in Tenda AC-10U AC1200 Router USAC10UV1.0RTLV15.03.06.48multiTDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg...

CVE-2021-1117

Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service...