CVE-2018-15736

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204F...

CVE-2018-15737

The CVE-2018-15737 entry concerns STOPzilla AntiMalware 6.5.2.59, specifically the szkg64.sys driver. The vulnerability is a Denial of Service caused by not validating the output buffer address value from IOCTL 0x80002043. The issue is documented across multiple sources (NVD/RH/CNVD/CVE records) ...

The vulnerability of the igdkm64.sys driver, a graphics system driver for Intel Graphics Drivers, allows a hacker to cause a service failure.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Symantec Endpoint Protection Information Disclosure Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec USA. The software provides security across physical and virtual systems. An information disclosure vulnerability exists in the 0x224844 IOCTL handler function of the ccSetx86.sys file in Symantec Endpoint Protection Small...

Vulnerability Spotlight: Symantec Endpoint Protection kernel memory information disclosure vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Overview Cisco Talos is disclosing an information leak vulnerability in the ccSetx86.sys kernel driver of Symantec Endpoint Protection Small Business Edition. The vulnerability exists in the driver’s control message handler. An attacker ca...

Symantec Endpoint Protection Small Business Edition ccSetx86.sys 0x224844 kernel memory information disclosure vulnerability

Summary An exploitable kernel memory disclosure vulnerability exists in the 0x224844 IOCTL handler function of Symantec Endpoint Protection Small Business Edition ccSetx86.sys, version 16.0.0.77. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in...

GLSA-201904-17 : Patch: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-17 Patch: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Patch: Multiple vulnerabilities

Background Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Description Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers reference...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these drivers...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker could exploit this vulnerability to cause a denial of service...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability (CNVD-2019-07813)

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A security vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

CVE-2018-12224

Buffer leakage in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable information...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-18089

Multiple out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-12224

CVE-2018-12224 refers to a buffer leakage in igdkm64.sys of the Intel Graphics Driver for Windows* prior to versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 and 24.20.100.6373, potentially enabling an authenticated local user to disclose information. The Intel advisory INTEL-SA-001...

GNU C Library: Arbitrary descriptor allocation

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description A vulnerability was discovered in the GNU C Library functions xdrbytes and xdrstring. Impact A remote attacker, by sending a crafted UDP packet, could cause a Denial of Service condition. Workaround...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:0254-1 Rating: important References: 1063993 1079730 1100408 1101982 1112646 1114957 1116717 1117275 1119493 1121600 1123156 1123179 Cross-References: CVE-2018-16872 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489...