CVE-2021-0090: Uncontrolled Search Path Element

Uncontrolled search path element in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0073: Undefined Security Weakness

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0094: Improper Link Resolution Before File Access

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Intel DSA 代码问题漏洞

Intel DSA is a driver update tool. It can detect user drivers, update installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must have. A security vulnerability exists in IntelR DSA versions prior to 20.11.50.9, whic...

Intel® DSA Advisory

Summary: Potential security vulnerabilities in Intel® Driver and Support Assistant DSA may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0094 Description: Improper link resolution before file...

GSD-2021-1000655 net: dsa: mt7530: fix VLAN traffic leaks

net: dsa: mt7530: fix VLAN traffic leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

UVI-2021-1000655 net: dsa: mt7530: fix VLAN traffic leaks

net: dsa: mt7530: fix VLAN traffic leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

UVI-2021-1000654 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

GSD-2021-1000629 net: dsa: mt7530: fix VLAN traffic leaks

net: dsa: mt7530: fix VLAN traffic leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000628 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

UVI-2021-1000595 net: dsa: mt7530: fix VLAN traffic leaks

net: dsa: mt7530: fix VLAN traffic leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000595 net: dsa: mt7530: fix VLAN traffic leaks

net: dsa: mt7530: fix VLAN traffic leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000594 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000594 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000550 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

GSD-2021-1000549 net: dsa: sja1105: add error handling in sja1105_setup()

net: dsa: sja1105: add error handling in sja1105setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-29058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.41 Description The issue is related to the sja1105 setup function in the Linux Kernel, specifically in the net: dsa: sja1105 component. It lacks proper error handling, which may potentially lead to...

PT-2021-25064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.41 Description The issue is related to the sja1105 setup function in the Linux Kernel, specifically in the net: dsa: sja1105 component. It lacks proper error handling, which may potentially lead to...

Debian DSA-4924-1 : squid - security update

Multiple denial of service vulnerabilities were discovered in the Squid proxy caching server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4924. The text itself is copyright C Software ...

Debian DSA-4921-1 : nginx - security update

Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...