724 matches found
ASUSTOR exFAT Driver Input Validation Error Vulnerability
ASUSTOR exFAT Driver is an exFAT file system driver from Taiwan, China ASUSTOR. A security vulnerability exists in ASUSTOR exFAT Driver 1.0.0.r20 and earlier versions, which stems from exfat.cgi and exfatctl failing to properly validate the server response and passing uncleaned server responses t...
ASUSTOR exFAT Driver Trust Management Issues Vulnerability
ASUSTOR exFAT Driver is an exFAT file system driver from Taiwan, China ASUSTOR. A trust management issue vulnerability exists in ASUSTOR exFAT Driver 1.0.0.r20 and prior versions. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An...
CVE-2019-11688
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
CVE-2019-11688
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
CVE-2019-11689
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...
CVE-2019-11689
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...
Remote code execution
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...
Input validation
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
CVE-2019-11689
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...
CVE-2019-11689
CVE-2019-11689 affects ASUSTOR exFAT Driver up to version 1.0.0.r20. During license validation, the components exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, enabling code execution as root. Red Hat and NVD entries corroborate the ...
CVE-2019-11688
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
CVE-2019-11688
ASUSTOR exFAT Driver (affected: 1.0.0.r20 and earlier) contains a Missing SSL Certificate Validation flaw in license validation paths. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com, enabling potential interception or tampering during license checks. Con...
CVE-2019-11688: Improper Certificate Validation
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...
CVE-2019-11689: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...
Updated kernel packages fix security vulnerabilities
This update is based on upstream 5.5.9 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...
Updated sleuthkit packages fix security vulnerabilities
Updated sleuthkit packages fix security vulnerabilities: In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as demonstrated by fls CVE-2017-13755. In The Sleuth Kit TSK 4.4.2, opening a crafted disk...
CVE-2017-13760
In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...
DEBIAN-CVE-2017-13760
In The Sleuth Kit TSK 4.4.2, fls hangs on a corrupt exfat image in tskimgread in tsk/img/imgio.c in libtskimg.a...