Ubuntu: Security Advisory (USN-4364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the USB driver for the Xirlink camera (drivers/media/usb/gspca/xirlink_cit.c) in the Linux kernel allows a hacker to compromise the integrity of protected information and cause service failures.

The vulnerability of the USB driver for the Xirlink camera driver/media/usb/gspca/xirlinkcit.c in the Linux kernel is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information and cause system failures...

USN-4345-1: Linux kernel vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

Stack overflow

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd in /sbin when parsing a long "Authorization: Basic" RTSP...

CVE-2020-12763

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in RTSP header parsing within the rtspd binary (/sbin). The flaw occurs when handling a long Authorization: Basic header and can lead to remote code execution or denial of servic...

TP-Link NC260 and NC450 OS Command Injection Vulnerability

TP-Link NC260 and TP-Link NC450 are both a webcam from China P&L TP-Link. An operating system command injection vulnerability exists in the httpSetEncryptKeyRpm method of the ipcamera binary in the TP-Link NC260 version 1.5.2 build 200304 and the NC450 version 1.5.3 build 200304. A remote attacke...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4345-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4345-1 advisory. Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondar...

USN-4345-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

USN-4345-1: Linux kernel vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

Netatmo Smart Indoor Camera Injection Vulnerability

Netatmo Smart Indoor Camera is a smart webcam from the French company Netatmo. An injection vulnerability exists in Netatmo Smart Indoor Camera. An attacker can exploit this vulnerability to execute commands...

CVE-2019-17101

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101 Command execution due to unsanitized input in Netatmo Smart Indoor Security Camera

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions...

CVE-2019-17101

Netatmo CVE-2019-17101 is a Command Injection vulnerability in Netatmo Smart Indoor Camera firmware prior to an unspecified x.xx release. The issue stems from improper neutralization of special elements, allowing an attacker to execute commands on the device. Affected product: Netatmo Smart Indoo...

CVE-2020-11668

A NULL pointer dereference flaw was found in the Xirlink camera USB driver 'xirlink-cit' in the Linux kernel. The driver mishandles invalid descriptors leading to a denial-of-service DoS. This could allow a local attacker with user privilege to crash the system or leak kernel internal information...

Active camera is switched unexpectedly when you review photos in Camera app in Windows 8.1 or Windows Server 2012 R2

Active camera is switched unexpectedly when you review photos in Camera app in Windows 8.1 or Windows Server 2012 R2 Symptoms Consider the following scenario: You have a computer that is running Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. The computer has two or more cameras, such as...