PT-2020-22161

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the following functions: ih264d fill bs1 16x16mb pslice...

Vault’s GCP Auth Method Allows Authentication Bypass

Summary A vulnerability was identified in Vault and Vault Enterprise “Vault” such that, with the GCP Auth Method configured and under certain circumstances, the values relied upon by Vault to validate Google Compute Engine GCE VMs may be manipulated and authentication bypassed. This vulnerability...

RHEL 8 : libexif (RHSA-2020:4766)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4766 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data, related to access control deficiencies, allows attackers to enhance their privileges.

The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8677

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-8677

CVE-2020-8677 affects Intel Visual Compute Accelerator 2 (all versions). It is an improper access control flaw that may let a privileged local user cause a denial of service. Intel will not provide a patch; mitigation is to limit privileged access to hosts. (Connected Intel advisory also covers C...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8676

The CVE-2020-8676 entry concerns Intel’s Visual Compute Accelerator 2 (VCA2) with improper access control that could allow a privileged user to escalate privileges via local access. Affected: Intel® Visual Compute Accelerator 2, all versions. Root cause: inadequate access control in the VCA2 comp...

CVE-2020-11206

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610,...

CVE-2020-11205

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR21...

CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P,...

CVE-2020-11184

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P,...

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...