CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227

MSI Dragon Center up to version 2.0.146.0 is affected by a local, null-pointer dereference in the IOCTL Handler via NTIOLib_X64.sys (MmUnMapIoSpace). The issue arises in the ReadPhysicalMemory/Ioctl 0xC3506104 path when MmMapIoSpace may return NULL and the code uses the pointer without validation...

The vulnerability in the admin_account.cgi script of Netgear R8500’s integrated routing software allows a hacker to execute arbitrary commands.

The vulnerability of the adminaccount.cgi microprogramming system in Netgear R8500 routers exists due to the failure to take measures to neutralize special elements used in the operating system’s command for processing the sysNewPasswd parameter. Exploiting this vulnerability allows a malicious...

flate2 (>=1.0.29 <=1.0.34), libz-rs-sys (>=0.0.1 <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1 <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

Fedora 41 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-401f10a92f)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-401f10a92f advisory. - Update the git2 crate to version 0.18.2. - Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an...

The vulnerability of the IOMap64.sys utility for monitoring and adjusting graphics adapters in Asus GPU Tweak II allows a hacker to increase their privileges.

The vulnerability of the IOMap64.sys utility for monitoring and adjusting graphics adapters in Asus GPU Tweak II is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges by sending custom IOCTL requests...

rhel bug fix and enhancement update

An update is available for libnbd, qemu-kvm, module.libvirt-python, module.swtpm, module.supermin, libvirt, module.qemu-kvm, module.sgabios, module.nbdkit, swtpm, libtpms, libguestfs, seabios, sgabios, module.libguestfs-winsupport, module.libguestfs, netcf, module.perl-Sys-Virt, module.virt-v2v,...

The vulnerability of the RtsPer.sys driver in the Realtek SD card reader software allows a hacker to gain unauthorized access to the DMA controller.

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the DMA controller...

CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

UBUNTU-CVE-2024-46837

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-6964)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6964 advisory. - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52728 libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf...

CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

CVE-2024-45181

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption...

CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

CVE-2024-45181

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in kernel memory corruption...

CVE-2024-45182

CVE-2024-45182 affects WIBU-SYSTEMS WibuKey64.sys in WibuKey before v6.70. The vulnerability arises from an improper bounds check that allows specially crafted packets to perform an arbitrary address read, leading to Denial of Service. It is fixed in v6.70. Affected components include the WibuKey...

PT-2024-31187 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys mgmt function. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys mgmt function as a temporary workaround...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...