CVE-2019-12067

A NULL pointer dereference flaw was found in the QEMU emulator's IDE AHCI emulator. Exploitation of the flaw could occur while committing DMA buffer in ahcicommitbuf if the command header 'ad-curcmd' was null. A privileged guest user could use this flaw to crash the QEMU process instance resultin...

Intel® FPGA Programmable Acceleration Card N3000 Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00319.html...

CVE-2019-14079

Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables i...

Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs

Fresh firmware vulnerabilities in Wi-Fi adapters, USB hubs, trackpads and cameras are putting millions of peripheral devices in danger of a range of cyberattacks, according to research from Eclypsium. TouchPad and TrackPoint firmware in Lenovo Laptops, HP Wide Vision FHD camera firmware in HP...

CVE-2019-18913

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

CVE-2019-18913

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

Code injection

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

CVE-2019-18913

The CVE-2019-18913 issue concerns pre-boot DMA that could allow unauthorized UEFI code execution via open-case attacks. Documents indicate this affects HP Intel-based Business PCs that support Windows 10 Kernel DMA protection, with affected versions depending on platform (before 01.04.02; before ...

CVE-2019-18913

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

Enterprise laptops vulnerable to critical direct memory access attack

By Sudais Asif In a direct memory access DMA attack an attacker can plug in a malicious device into one’s computer and extract highly confidential information. This is a post from HackRead.com Read the original post: Enterprise laptops vulnerable to critical direct memory access attack...

Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

Vulnerabilities in Dell and HP laptops could allow an attacker to access information and gain kernel privileges via the devices’ Direct Memory Access DMA capability. DMA is a processing-efficiency approach for peripherals such as PCI cards or network interface cards that, as the name suggests,...

HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability

Potential Security Impact Arbitrary Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT. Reported by: Mickey Shkatov from Eclypsium, and Zoltan Harmath from Microsoft. VULNERABILITY SUMMARY A potential security vulnerability with pre-boot...

CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

DEBIAN-CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

CVE-2019-20175

An issue was discovered in idedmacb in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSIIOCTLSENDCOMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 the size...

PT-2019-4874 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.4.0 through 4.2.0 Description: An issue was discovered in the ide dma cb function, which can cause the QEMU process in the host system to crash via a special SCSI IOCTL SEND COMMAND. This issue implies that the size of...

CVE-2019-17075

A denial of service DoS was found in the writetptentry in drivers/infiniband/hw/cxgb4/mem.c in the cxgb4' Chelsio T4/T5 RDMA Driver. Some of the architectures performing the DMA operation directly from the stack variable instead of the heap allows an attacker in the network to cause some security...

CVE-2019-18579

Settings for the Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's...

CVE-2019-18579

Settings for the Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's...