A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host resulting in a denial of service.

...

Intel Data Center Manager Console Information Disclosure

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

get_user_pages() DoS

The vulnerability of the getuserpages function is related to errors during multi-threaded operations race conditions. Exploiting this vulnerability could allow a hacker to cause service failures...

Linux kernel 资源管理错误漏洞

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat. A resource management error vulnerability exists in Red Hat Enterprise Linux, which arises when a network system or product performs an operation in memory without properly validating data boundaries, resulting ...

Intel Driver & Support Assistant DoS

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insufficient protection of permissions. Exploiting this vulnerability can allow a hacker to cause service failures...

Cisco IOS XR DoS

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Debian DLA-2469-1 : qemu security update

Some issues have been found in qemu, a fast processor emulator. All issues are related to assertion failures, out-of-bounds access failures or bad handling of return codes. For Debian 9 stretch, these problems have been fixed in version 1:2.8+dfsg-6+deb9u12. We recommend that you upgrade your qem...

Microsoft Exchange Server DoS

The vulnerability of Microsoft Exchange Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Intel PROSet/Wireless WiFi Network DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Intel Wireless Bluetooth Driver DoS

The vulnerability of the Intel Wireless Bluetooth driver exists due to insufficient testing of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Filesystem Component DoS

The vulnerability of the Filesystem component in Oracle Solaris is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures...

Intel Quartus Prime Automated Design System Unprocessed Exception DoS

The vulnerability of Intel Quartus Prime’s automated design system for IntelR 50GbE IP Core relates to an unprocessed exception. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Windows DoS

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by transmitting specially crafted data...

Intel Heap Buffer Overflow DoS

The vulnerability of Intel microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and cause system failures...

Eclipse Jetty Duplicate Resource Code Execution

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...

Cisco SD-WAN CLI DoS

The vulnerability of the command-line interface CLI of the programmatically defined Cisco SD-WAN network is related to an incorrect path name limitation for the directory. Exploiting this vulnerability could allow a attacker to cause service failures...

On Blockchain Voting

Blockchain voting is a spectacularly dumb idea for a whole bunch of reasons. I have generally quoted Matt Blaze: Why is blockchain voting a dumb idea? Glad you asked. For starters: It doesnt solve any problems civil elections actually have. Its basically incompatible with "software independence",...

Oracle Linux 8 : bind (ELSA-2020-4500)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory. - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match...

Cisco Adaptive Security Appliance Resource Consumption DoS

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

Cisco Adaptive Security Appliances TCP DoS

The vulnerability of the TCP packet processing service provided by micro-programmed network interface devices from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor t...