CVE-2021-1919

CVE-2021-1919 describes an integer underflow in Qualcomm Snapdragon video/RTCP handling where the RTCP length is smaller than the actual number of blocks, affecting Snapdragon Auto, Compute, Connectivity, Ciot, Industrial IoT, IoT, Voice & Music, Wearables and related Snapdragon lines. The vulner...

CVE-2021-1916

CVE-2021-1916 involves a buffer underflow in Qualcomm Snapdragon components due to a lack of input index checks. Public sources confirm a critical impact (CVSSv3 base 9.8, NETWORK attack vector; no user interaction) affecting Snapdragon Auto/Compute/Connectivity and Snapdragon IoT family; the iss...

CVE-2021-1914

CVE-2021-1914 affects Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Voice & Music, Wearables). Root cause: mishandling of unsupported input can cause a loop with an unreachable exit condition. Impact: described as a high-severity issue with potentia...

CVE-2021-1914

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2021-34150

The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...

CVE-2021-34144

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMPSCOLinkRequest packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...

CVE-2021-34144

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMPSCOLinkRequest packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...

Fedora: Security Advisory for containernetworking-plugins (FEDORA-2021-54f88bebd4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google TensorFlow数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. a security vulnerability exists in the full connectivity layer in TFLite in versions prior to Google TensorFlow 2.6.0. A local attacker could exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client...

[SECURITY] Fedora 34 Update: containernetworking-plugins-1.0.0-0.3.rc1.fc34

The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resource...

[SECURITY] Fedora 33 Update: containernetworking-plugins-1.0.0-0.3.rc1.fc33

The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resource...

ALBA-2021:3055 NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

OPENSUSE-SU-2021:1114-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Version bump to 6.1.26 released July 28 2021 by Oracle This is a maintenance release. The following items were fixed and/or added: - VMSVGA: fixed VM screen artifacts after restoring from saved state bug 20067 - Storage: Fixed audio endiannes...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2021-2291)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2021-2241)

According to the version of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in th...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2021-2267)

According to the version of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in th...