CVE-2021-35589

CVE-2021-35589 affects Oracle Solaris 11, specifically the Device drivers component. The vulnerability allows a high-privilege attacker with local logon to possibly cause a hang or complete denial of service on Oracle Solaris; attacks may impact additional products. CVSS 3.1 base score is 6.0 (Av...

CVE-2021-35589: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device drivers. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Whil...

Oracle Solaris Critical Patch Update : oct2021_SRU11_4_36_101_2

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon t...

Oracle Solaris Denial of Service Vulnerability (CNVD-2021-102406)

Oracle Solaris is a Unix-like operating system, and a denial-of-service vulnerability exists in the Device drivers component of Oracle Solaris version 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash repeatedly and frequently...

Oracle Solaris 安全漏洞

Oracle Solaris is a Unix-like operating system, and a denial-of-service vulnerability exists in the Device drivers component of Oracle Solaris version 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash repeatedly and frequently...

FreeBSD-SA-20:21.usb_net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...

Linux kernel resource management error vulnerability (CNVD-2020-52840)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the tty-discdata handling of the drivers/net/slip/slip.c and drivers/net/can/slcan.c files in versions of Linux...

Support Process for DVD Burning related issues

Network latency and bandwidth can affect user experience and USB device operation when using generic USB redirection for some types of USB devices. Operations that are highly data driven such as for archival devices can be problematic due to multiple factors that lay outside the realm of user...

Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus

Summary There are multiple security vulnerabilities in the Linux Kernel that affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2019-19532 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by multiple out-of-bound write conditions in HID drivers. CVSS Base...

USN-4286-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that a race condition existed in the Softmac USB Prism54 devi...

Wacom Tablet Data Exfiltration Raises Security Concerns

The Wacom digital drawing tablet appears to be silently exfiltrating user data, according to an investigation by software engineer Robert Heaton – and the company responded on Friday, downplaying the report. However, security researchers say the tablets still pose a risk and a privacy problem...

CVE-2019-9730

CVE-2019-9730 concerns the Synaptics (formerly Conexant) Audio driver. Affected component is the CxUtilSvc/CxUtilSrv.exe within the Sound Device Driver, where an incorrect access control allows a local user to escalate privileges to the Windows Registry via an unpublished API. Impact: local privi...

CVE-2019-9730: Undefined Security Weakness

Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API...

Privilege Escalation

The kernel packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way Linux kernel's Transparent Huge Pages THP implementation handled non-huge page migration. A local, unprivileged user could use this flaw to crash the kernel by migrating transparent...

PT-2019-2538

Name of the Vulnerable Software and Affected Versions Synaptics Sound Device drivers versions prior to 2.29 Description The issue is related to insufficient access control in the CxUtilSvc component of the Synaptics Sound Device drivers. This can be exploited by a local attacker to elevate...

Servicing stack update for Windows 10 Version 1809: April 2, 2019

None None...

Impact of 62 million devices: the interpretation I is how to find the Marvell Avastar Wi-Fi remote code execution vulnerability-vulnerability warning-the black bar safety net

One, overview In the present study, I will mainly analyze the Marvell WiFi-FullMAC SoC security. Since we have not yet completed the product with a chip of a wireless device of research, and therefore which may contain large amounts of unaudited code, which might appear serious security problems...

Microsoft Windows: Prevent installation of devices (device setup classes)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windenydriverssetupclasses.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent installation of devices using drivers that match these device setup classes Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbon...

Microsoft Windows 10: Load and unload device drivers

This policy setting determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new hardware already exists in the driver.cab file on the device. Device drivers run as highly privileged code. Windows supports the Plug and Play...

CVE-2017-2697

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer...