Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege and/or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0510 Description: Out of bounds read in...

openSUSE Security Update : python-rtslib-fb (openSUSE-2020-1156)

This update for python-rtslib-fb fixes the following issues : - Update to version v2.1.73 bsc1173257 CVE-2020-14019 : - version 2.1.73 - savetofile: fix fd open mode - saveconfig: copy temp configfile with permissions - saveconfig: open the temp configfile with modes set - Fix 'is not' with a...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1153)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow...

CVE-2020-7459

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

Input validation

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

CVE-2020-7459

Removed by vendor...

CVE-2020-7459

CVE-2020-7459 affects FreeBSD 12.x and 11.x UDB network drivers (smsc(4), muge(4), cdceem(4)). The issue is a missing length validation in multiple USB network drivers that allows a malicious USB device to write beyond the end of an allocated network packet buffer, potentially enabling kernel or ...

Apple macOS Catalina Graphics Drivers Component Out-of-Bounds Read Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Graphics Drivers is one of the graphics driver components. A security vulnerability exists in the Graphics Drivers component in Apple macOS Catalina versions prior to 10.15.6. An attacker could exploit thi...

HPSBHF03681 rev. 2 - Intel® Graphics Drivers August 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities in some Intel® Graphics Drivers which may allow escalation of privilege and/...

FreeBSD-SA-20:21.usb_net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...

CentOS 7 : kernel (RHSA-2020:3220)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory. - Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially...

CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

DEBIAN-CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

UBUNTU-CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

Design/Logic Flaw

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

RHEL 7 : kernel (RHSA-2020:3224)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3224 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5791)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5791 advisory. - efi: Restrict efivarssdtload when the kernel is locked down Matthew Garrett Orabug: 31662729 CVE-2019-20908 Tenable has extracted the preceding description...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1062)

The openSUSE Leap 15.2 was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-15393: usbtestdisconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 bnc1173514. - CVE-2020-12771: btreegccoalesce in drivers/md/bcache/btree....

Lenovo Drivers Management Unquoted Service Path Vulnerability

Lenovo Drivers Management is a driver management tool. A security vulnerability exists in versions prior to Lenovo Drivers Management 2.7.1128.1046. An attacker can exploit the vulnerability to execute code with elevated privileges...