PT-2020-11075

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13025.10004 Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. This can be triggered by a specially crafted pixel shader, potentially causing a denial of service. An attacker ca...

CVE-2019-5124: Out-of-bounds Read

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered...

PT-2020-11102

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002 Description A type confusion issue exists in the AMD ATIDXX64.DLL driver, which can be triggered by a specially crafted pixel shader, potentially leadi...

CVE-2019-5183

An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially crafted...

PT-2020-11076

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13003.1007 Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. This can be triggered by a specially crafted pixel shader, potentially causing a denial of service. An attacker can...

PT-2020-11068

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13001.50005 Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. This can be triggered by a specially crafted pixel shader, potentially causing a denial of service. An attacker ca...

CVE-2019-5183: Access of Resource Using Incompatible Type

An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially crafted...

CVE-2019-5147: Out-of-bounds Read

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered...

CB Customer Spotlight: Q&A with BraunAbility’s Arlie Hartman

BraunAbility is a mobility vehicle company committed to improving access and transportation for the world’s wheelchair community. Driven by a strong corporate culture of doing right by their customers and communities, providing advanced security has become an essential pillar of their mission...

VMware Tools 10.x < 11.0.0 Privilege Escalation (VMSA-2020-0002)

The version of VMware Tools installed on the remote Windows host is 10.x, which is prior to 11.0.0. It is, therefore, affected by a race condition which may allow for privilege escalation in the virtual machine where Tools is installed. An authenticated, local attacker can exploit this to escalat...

Photon OS 3.0: Apache PHSA-2020-3.0-0051

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0051. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133209;...

Vulnerability Spotlight: Multiple vulnerabilities in some AMD graphics cards

Piotr Bania of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Multiple vulnerabilities exist in a driver associated with the AMD Radeon line of graphics cards. An attacker can exploit these bugs by providing a specially crafted shader file to the user while using VMware...

AMD ATI Radeon ATIDXX64.DLL MOVC shader functionality denial-of-service vulnerability

Summary An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

AMD ATI Radeon ATIDXX64.DLL shader functionality VTABLE remote code execution vulnerability

Summary An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially...

AMD ATI Radeon ATIDXX64.DLL shader functionality constant buffer denial-of-service vulnerability

Summary An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

AMD ATI Radeon ATIDXX64.DLL MAD shader functionality denial-of-service vulnerability

Summary An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

NewStart CGSL CORE 5.05 / MAIN 5.05 : openslp Vulnerability (NS-SA-2020-0001)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has openslp packages installed that are affected by a vulnerability: - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical...

Photon OS 3.0: Haproxy PHSA-2020-3.0-0047

An update of the haproxy package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133064;...

Photon OS 3.0: Openssl PHSA-2020-3.0-0048

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0048. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Oniguruma PHSA-2020-3.0-0047

An update of the oniguruma package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133067;...