Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device drivers. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Whil...

CVE-2021-35589

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device drivers. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Whil...

CVE-2021-35589

CVE-2021-35589 affects Oracle Solaris 11, specifically the Device drivers component. The vulnerability allows a high-privilege attacker with local logon to possibly cause a hang or complete denial of service on Oracle Solaris; attacks may impact additional products. CVSS 3.1 base score is 6.0 (Av...

CVE-2021-35589

Vulnerability in the Oracle Solaris product of Oracle Systems component: Device drivers. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Whil...

CVE-2021-42739

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...

CVE-2021-42739

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...

Oracle Solaris Critical Patch Update : oct2021_SRU11_4_36_101_2

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon t...

Oracle Solaris Denial of Service Vulnerability (CNVD-2021-102406)

Oracle Solaris is a Unix-like operating system, and a denial-of-service vulnerability exists in the Device drivers component of Oracle Solaris version 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash repeatedly and frequently...

CVE-2021-42739

The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...

Oracle Solaris 安全漏洞

Oracle Solaris is a Unix-like operating system, and a denial-of-service vulnerability exists in the Device drivers component of Oracle Solaris version 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash repeatedly and frequently...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1357-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

Security Bulletin: Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities

Summary Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities Vulnerability Details CVEID: CVE-2020-12362 DESCRIPTION: Intel Graphics Drivers could allow a local authenticated attacker to gain elevated privileges on the system, caused by an integer overflow in the...

October 12, 2021—KB5006739 (Monthly Rollup)

None None...

October 12, 2021—KB5006743 (Monthly Rollup)

None None...

October 12, 2021—KB5006714 (Monthly Rollup)

None None...

October 12, 2021—KB5006729 (Security-only update)

None None...

October 12, 2021—KB5006715 (Security-only update)

None None...

October 12, 2021—KB5006728 (Security-only update)

None None...

Insyde InsydeH2O Memory Corruption Vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.Insyde InsydeH2O suffers from a memory corruption vulnerability. InsydeH2O is vulnerable to memory corruptio...

CVE-2020-3702

A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An attacker within wireless range could send crafted traffic leading to information disclosure. Mitigation Mitigation for this issue is either not available or the currently available options doe...