13 matches found
cve-2019-6260
ASPEED BMC AHB 인터페이스를 위한 테스트 및 디버그 도구 경고 이 도구의 동작을 대상 머신의 맥락에서 이해하지 못했다면 사용하지 마십시오. 이 도구는 머신의 저수준 하드웨어 및 펌웨어 인터페이스를 조작합니다. 특히, 프로빙probe 작업은 대상 장치가 우리가 찾고자 하는 장치가 아닐 경우 그 결과에 대한 불확실성을 수반합니다. 이 도구의 사용은 대상 머신의 불안정성, 충돌 또는 심각한 오류를 초래할 수 있습니다. 소개 ASPEED BMC는 여러 가지 암시적implicit 운영 모드를 가지고 있습니다: 1...
Linux Distros Unpatched Vulnerability : CVE-2020-36787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock source...
CVE-2020-36787
A clock handling logic flaw was found in the Linux kernel, which introduces an improper reset on the Video Engine hardware and may generate unexpected DMA memory transfers that can corrupt the memory region in random and sporadic ways. Mitigation Mitigation for this issue is either not available ...
CVE-2020-36787
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...
DEBIAN-CVE-2020-36787
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...
CVE-2020-36787 media: aspeed: fix clock handling logic
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...
CVE-2020-36787 media: aspeed: fix clock handling logic
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...
PT-2020-7004
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's media subsystem, specifically the Aspeed video driver. It introduces improper reset on the Video Engine hardware, causing unexpected DMA memory...
Code injection
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...
CVE-2019-6260
The CVE-2019-6260 issue affects ASPEED AST2400/AST2500 Baseboard Management Controllers (BMCs). The hardware/firmware implements AHB bridges that allow arbitrary reads/writes to the BMC’s physical address space from the host (or network in some cases). Affected components include iLPC2AHB bridge ...
CVE-2019-6260: Undefined Security Weakness
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...
PT-2019-1339
Name of the Vulnerable Software and Affected Versions OpenBMC versions affected versions not specified ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware Description The issue is related to access control errors in the OpenBMC software, which can be exploited by a...