CVE-2023-50809

In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...

CVE-2023-50809

CVE-2023-50809 affects Sonos devices (Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, Five) due to a stack buffer overflow in the mt_7615.ko wireless driver during WPA2 four-way handshake negotiation. The root cause is improper validation of an information element, enabling remote code execution wit...

Microsoft Azure Arc Jumpstart Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure Arc Jumpstart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Azure Arc Jumpstart. When installed from the official...

SUSE CVE-2022-48854

In the Linux kernel, the following vulnerability has been resolved: net: arcemac: Fix use after free in arcmdioprobe If bus-state is equal to MDIOBUSALLOCATED, mdiobusfreebus will free the "bus". But bus-name is still used in the next line, which will lead to a use after free. We can fix it by...

UBUNTU-CVE-2022-48854

In the Linux kernel, the following vulnerability has been resolved: net: arcemac: Fix use after free in arcmdioprobe If bus-state is equal to MDIOBUSALLOCATED, mdiobusfreebus will free the "bus". But bus-name is still used in the next line, which will lead to a use after free. We can fix it by...

The vulnerability of Kubernetes cluster extensions that support Azure Arc, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of Kubernetes cluster extensions that support Azure Arc is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

MAL-2024-2348 Malicious code in example-arc-server-request-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f47e48a4969642e3e6ab7d39b5d8f25a7a6d7acf2bbeec054888cfeada839219 The OpenSSF Package Analysis project identified 'example-arc-server-request-local' @ 100.0.1 npm as malicious. It is considered malicious becaus...

Malicious code in example-arc-server-request-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f47e48a4969642e3e6ab7d39b5d8f25a7a6d7acf2bbeec054888cfeada839219 The OpenSSF Package Analysis project identified 'example-arc-server-request-local' @ 100.0.1 npm as malicious. It is considered malicious becaus...

MAL-2024-2347 Malicious code in example-arc-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313fe2f7f49471a9351eff38bafe5bf3968444661867230198924b55a3e94909 The OpenSSF Package Analysis project identified 'example-arc-server' @ 100.0.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in example-arc-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313fe2f7f49471a9351eff38bafe5bf3968444661867230198924b55a3e94909 The OpenSSF Package Analysis project identified 'example-arc-server' @ 100.0.2 npm as malicious. It is considered malicious because: - The packa...

OPENSUSE-SU-2024:10630-1 arc-5.21q-6.7 on GA media

These are all security issues fixed in the arc-5.21q-6.7 package on the GA media of openSUSE Tumbleweed...

RHEL 4 : libwmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gd: additional overflows CVE-2004-0941 - gd: arc drawing functions can consume large amount of CPU time...

CVE-2021-47531

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix mmap to include VMIO and VMDONTDUMP In commit 510410bfc034 "drm/msm: Implement mmap as GEM object function" we switched to a new/cleaner method of doing things. That's good, but we missed a little bit. Before that...

CVE-2021-47531 drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix mmap to include VMIO and VMDONTDUMP In commit 510410bfc034 "drm/msm: Implement mmap as GEM object function" we switched to a new/cleaner method of doing things. That's good, but we missed a little bit. Before that...

CVE-2021-47531

Mode C CVE-2021-47531: Linux kernel MSM DRM mmap handling fixed. The issue occurred when switching to the new mmap path (drm/msm: Implement mmap as GEM object function) and skipping the default mmap code. This caused missing VM_FLAGS and page-prot setup, contributing to crashes on ARC++ Chromeboo...

CVE-2024-21864

Improper neutralization in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2024-21864

CVE-2024-21864 affects Intel Arc and Iris Xe Graphics software prior to version 31.0.101.5081. The underlying issue is improper neutralization in the graphics software, which could allow an unauthenticated user to escalate privileges via adjacent network access. Affected products are Intel Arc an...

CVE-2024-21864

Improper neutralization in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access...

Intel Arc 和 Iris Xe 安全漏洞

Intel Iris Xe and Intel Arc are both products of Intel Corporation, the United States of America.Intel Iris Xe is a display chip that is integrated inside a central processor.Intel Arc is a family of graphics cards. A security vulnerability previously existed in Intel Arc and Iris Xe version...

CVE-2023-5938

Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable to path traversal via 'zip slip' attacks. An administrator able to provide tampered archives to be processed by the affected versions of Arc may be able to have arbitrary files...