744 matches found
CVE-2021-31916
An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user CAPSYSADMIN privilege to gain access to out-of-bounds memory leading to a system...
USN-4909-1: Linux kernel vulnerabilities
Loris Reiff discovered that the BPF implementation in the Linux kernel did not properly validate attributes in the getsockopt BPF hook. A local attacker could possibly use this to cause a denial of service system crash. CVE-2021-20194 Olivier Benjamin, Norbert Manthey, Martin Mazein, and Jan H...
USN-4904-1 linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities
Ben Harris discovered that the Linux kernel would strip extended privilege attributes of files when performing a failed unprivileged system call. A local attacker could use this to cause a denial of service. CVE-2015-1350 Andrey Konovalov discovered that the video4linux driver for Hauppauge HD PV...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4751-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4751-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive...
CVE-2021-28952
A flaw was found in the Linux kernel. The soundwire device driver has a buffer overflow when an unexpected port ID number is encountered. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2021-28952
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. This has been fixed in 5.12-rc4...
CVE-2021-28952
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. This has been fixed in 5.12-rc4...
CVE-2021-27077
Windows Win32k Elevation of Privilege Vulnerability...
Input validation
In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...
Epson Iprojection Input Validation Error Vulnerability
Epson Iprojection is an application from Epson Japan that provides wireless projection capabilities for mobile devices. A security vulnerability exists in Epson iProjection v2.30 that originates from allowing a local user to cause a denial of service BSOD by using IOCTL 0x9C402402, 0x9C402406, or...
IObit Advanced SystemCare Security Vulnerability
Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing, and optimizing the system, among other things. A security vulnerability exists in IObit Advanced SystemCare 13.2 that allows an...
The vulnerability of the device driver for the trusted platform module (TPM) of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the device driver for the trusted platform module TPM of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Microsoft Windows Multiple Vulnerabilities (KB4598279)
This host is missing a critical security update according to Microsoft KB4598279 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4598278)
This host is missing a critical security update according to Microsoft KB4598278 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1656
TPM Device Driver Information Disclosure Vulnerability...
CVE-2021-1656
TPM Device Driver Information Disclosure Vulnerability...
Information disclosure
TPM Device Driver Information Disclosure Vulnerability...
CVE-2021-1656 TPM Device Driver Information Disclosure Vulnerability
...
CVE-2021-1656
CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...
