Patch: Multiple vulnerabilities

Background Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Description Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers reference...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these drivers...

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers allows a hacker to disclose protected information.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability (CNVD-2019-07813)

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A buffer overflow vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker could exploit this vulnerability to cause a denial of service...

Intel Graphics Driver for Windows Buffer Overflow Vulnerability

Intel Graphics Driver for Windows is an American Intel Intel company's graphics card driver for the Windows platform. A security vulnerability exists in the igdkm64.sys file in Intel Graphics Driver for Windows. A local attacker can exploit this vulnerability to disclose information...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-18089

Multiple out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable...

CVE-2018-12224

Buffer leakage in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable information...

CVE-2018-18090

Out of bounds read in igdkm64.sys in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 may allow an authenticated user to potentially enable denial of...

CVE-2018-12224

CVE-2018-12224 refers to a buffer leakage in igdkm64.sys of the Intel Graphics Driver for Windows* prior to versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 and 24.20.100.6373, potentially enabling an authenticated local user to disclose information. The Intel advisory INTEL-SA-001...

GNU C Library: Arbitrary descriptor allocation

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description A vulnerability was discovered in the GNU C Library functions xdrbytes and xdrstring. Impact A remote attacker, by sending a crafted UDP packet, could cause a Denial of Service condition. Workaround...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:0254-1 Rating: important References: 1063993 1079730 1100408 1101982 1112646 1114957 1116717 1117275 1119493 1121600 1123156 1123179 Cross-References: CVE-2018-16872 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489...

February 21, 2019—KB4491101 (OS Build 10240.18135)

None None...

CVE-2019-8318

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2018-5410

Dokan/Dokany’s dokan1.sys driver (Dokan versions 1.0.0.5000–1.2.0.1000) contains a stack-based buffer overflow. An attacker who can open a device handle can send crafted input to overflow the kernel stack, enabling local privilege escalation. The issue was introduced in 1.0.0.5000. A fix is avail...

CVE-2018-19523

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

VIA Technologies EPIA-E900 System Motherboard ETK_E900.sys SmartETK Driver Denial of Service Vulnerability

VIA Technologies EPIA-E900 system board is an embedded Pico-ITX motherboard from VIA Technologies.ETKE900.sys SmartETK driver is one of the drivers. A denial of service vulnerability exists in the ETKE900.sys SmartETK driver for the VIA Technologies EPIA-E900 system motherboard, which can be...

CVE-2018-20404

ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...

CVE-2018-20404

CVE-2018-20404 affects the ETK_E900.sys SmartETK driver for VIA Technologies EPIA-E900 system boards. The vulnerability is triggered by IOCTL 0x9C402048, which calls memmove and may fail on an arbitrary, uncontrollable address, leading to an eternal hang or a blue screen (DoS). Exploitation detai...