14763 matches found
CVE-2024-46959
The CVE-2024-46959 entry concerns the runofast Indoor Security Camera for Baby Monitor. A default root password of “password” allows unauthorized access to the device’s RTSP stream via the /stream1 endpoint, enabling exposure of video and audio streams. Affected component: the device’s root accou...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-3)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-3 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7009-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7008-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7008-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...
The vulnerability of FLAC files in the Gstreamer multimedia framework, related to integer overflow or cyclic transitions, allows attackers to execute arbitrary code.
The vulnerability of the FLAC file format used by the Gstreamer multimedia framework is related to integer overflow or cyclic redundancy checks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7005-2)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7005-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...
CVE-2024-45383
A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...
CVE-2024-45383
A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...
CVE-2024-45383
A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...
CVE-2024-45383
A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...
CVE-2024-45383
CVE-2024-45383 affects Microsoft High Definition Audio Bus Driver (HDAudBus.sys), specifically the HDAudBus_DMA interface. A mishandling of IRP requests allows a specially crafted app to issue multiple IRP Complete calls, causing a local denial-of-service and potential BSOD. Talos confirms vulner...
Microsoft High Definition Audio Bus Driver 安全漏洞
Microsoft High Definition Audio Bus Driver is a high-definition audio bus driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft High Definition Audio Bus Driver version 10.0.19041.3636, which originates from the presence of an IRP Request Mishandling vulnerability,...
Microsoft High Definition Audio Bus Driver HDAudBus_DMA multiple irp complete requests vulnerability
Talos Vulnerability Report TALOS-2024-2008 Microsoft High Definition Audio Bus Driver HDAudBusDMA multiple irp complete requests vulnerability September 12, 2024 CVE Number CVE-2024-45383 SUMMARY A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High...
The vulnerability of the vc4 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the vc4 component in the Linux operating system’s kernel is related to the assignment of a null pointer in the vc4hdmiaudioinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-7003-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-2 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-1 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7006-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7006-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A...
A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.
...