Advisory ROSA-SA-2023-2097

Software: kernel 3.10.0-1160.83.1.el7 OS: rosa-server79 packageevrstring: 3.10.0-1160.83.1.el7 CVE-ID: CVE-2022-2964 BDU-ID: 2022-05848 CVE-Crit: HIGH CVE-DESC: A vulnerability in the Linux operating system kernel driver for ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet devices is related t...

PT-2023-15286 · Bt Driver · Bt Driver

Name of the Vulnerable Software and Affected Versions: bt driver affected versions not specified Description: The issue is related to a thread competition in the bt driver, which results in the early release of resources that are still to be accessed. This can lead to a local denial of service in...

PT-2023-15279 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a missing bounds check in the wlan driver, which could lead to a possible out of bounds write. This may result in a local denial of service in wlan services...

PT-2023-13628 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing parameters check in the wlan driver, which could lead to a local denial of service in wlan services. Recommendations: At the moment, there is ...

PT-2023-15278 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a missing bounds check in the wlan driver, which could lead to a local denial of service in wlan services due to a possible out of bounds read. Recommendations: ...

PT-2023-13627 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing parameters check in the wlan driver, which could lead to a local denial of service in wlan services. Recommendations: At the moment, there is ...

Apache AGE SQL注入漏洞

Apache AGE is a PostgreSQL extension from the Apache Foundation that provides graphical database functionality. An SQL injection vulnerability exists in the Apache AGE driver, which stems from an inability to parameterize passed values, leading to SQL injection...

FUJIFILM Driver Distributor 加密问题漏洞

FUJIFILM Driver Distributor is a driver from FUJIFILM. A security vulnerability exists in FUJIFILM Driver Distributor v2.2.3.1 and earlier versions, which originates from passwords being stored in a recoverable format, and encrypted administrator credentials can be decrypted if an attacker gains...

CVE-2022-3432

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

Lenovo Notebook 安全漏洞

Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. The Lenovo Notebook suffers from a security vulnerability that stems from a potential flaw in the WMI installation driver, which could allow an attacker with elevated privileges to modify the secure boot settings by modifying th...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker can exploit the vulnerability to remotely execute code...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from the Chinese company Lenovo. The Lenovo ThinkPad suffers from a security vulnerability that stems from its driver that could allow a local attacker with elevated privileges to cause an information disclosure via a buffer out-of-bounds read...

CVE-2022-44427

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

ASB-A-259967780

The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption issues...

NVIDIA vGPU Display Driver 安全漏洞

The NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A security vulnerability exists in the NVIDIA vGPU Display Driver that originates in the D-Bus configuration file, where an unauthorized user in a guest VM can...

The vulnerability of the Linux operating system’s kernel USB driver allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the Linux operating system’s kernel USB driver is related to the use of a buffer for writing after deletion in the putdev function. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

Code injection

An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in drivers/net/ethernet/sfc/ef100nic.c lacks check of the return value of kmalloc...

Microsoft Bluetooth Driver 安全漏洞

Microsoft Bluetooth Driver is an application software Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Bluetooth Driver. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

UBUNTU-CVE-2022-42329

Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...