Lucene search
+L

704 matches found

Vulnrichment
Vulnrichment
•added 2024/02/29 3:52 p.m.•29 views

CVE-2023-52488 serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent $00, followed by all the FIFO data without having to...

6.6AI score0.00289EPSS
SaveExploits0References6
CVE
CVE
•added 2024/02/29 3:52 p.m.•8299 views

CVE-2023-52488

CVE-2023-52488 concerns the Linux kernel driver for SC16IS7XX UARTs. In burst mode, the SC16IS7XX can read/write FIFO data with an initial register address, and regmap_raw_read()/regmap_raw_write() do not increment the register in this path. This could corrupt the regmap cache when multi-byte tra...

5.5CVSS6AI score0.00289EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2024/02/29 3:52 p.m.•64 views

CVE-2023-52488

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent $00, followed by all the FIFO data without having to...

5.5CVSS7.3AI score0.00289EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/29 12:00 a.m.•4 views

CVE-2023-52488: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent $00, followed by all the FIFO data without having to...

5.5CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/02/26 2:34 p.m.•39 views

Buffer Overflow

QEMU is vulnerable to Buffer Overflow. The vulnerability is due to an integer underflow, resulting in a buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow...

8.8CVSS6.8AI score0.01397EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/02/20 6:15 p.m.•10 views

DEBIAN-CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.7AI score0.01397EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/20 6:15 p.m.•33 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2024/02/20 6:15 p.m.•34 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References3
OSV
OSV
•added 2024/02/20 6:15 p.m.•13 views

UBUNTU-CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/02/20 12:00 a.m.•34 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

6.8AI score0.01397EPSS
SaveExploits1References4
OSV
OSV
•added 2024/02/20 12:00 a.m.•34 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/02/20 12:00 a.m.•109 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score0.01397EPSS
SaveExploits1
Amazon
Amazon
•added 2024/02/06 12:00 a.m.•7 views

Low: pam

Issue Overview: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with pamnamespace configured will cause the openat in...

5.5CVSS6.4AI score0.00459EPSS
SaveExploits1
Amazon
Amazon
•added 2024/02/05 12:00 a.m.•11 views

Low: pam

Issue Overview: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with pamnamespace configured will cause the openat in...

5.5CVSS6.5AI score0.00459EPSS
SaveExploits1
OSV
OSV
•added 2024/02/02 11:06 a.m.•10 views

OESA-2024-1129 pam security update

PAM Pluggable Authentication Modules is a system of libraries that handle the authentication tasks of applications services on the system. Security Fixes: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/26 11:06 a.m.•9 views

OESA-2024-1096 pam security update

PAM Pluggable Authentication Modules is a system of libraries that handle the authentication tasks of applications services on the system. Security Fixes: A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with /tmp mounted as a...

5.5CVSS6.3AI score0.00459EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/01 12:00 a.m.•20 views

PT-2024-14671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when switching to another HDMI mode, causing unnecessary disabling/enabling of FIFO, which leads to both HPO and DIG registers being set at the same time. This can resul...

5.5CVSS6.1AI score0.00193EPSS
SaveExploits0References21
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•14 views

kernel: mlx5: fix possible ptp queue fifo use-after-free

In the Linux kernel, the following vulnerability has been resolved: mlx5: fix possible ptp queue fifo use-after-free Fifo indexes are not checked during pop operations and it leads to potential use-after-free when poping from empty queue. Such case was possible during re-sync action. WARNONONCE...

7.8CVSS6.8AI score0.0015EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•16 views

PT-2023-9476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition between DMA RX transfer completion and RX FIFO drain in the Linux kernel's spi: sun6i component. This behaviour is correct when dealing with SPI ...

7.8CVSS6.3AI score0.00184EPSS
SaveExploits0References473
OSV
OSV
•added 2023/08/08 12:34 p.m.•48 views

RLSA-2023:4378 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipvlan: out-of-bounds write caused by unclear skb-cb CVE-2023-3090 kernel: clsflower: out-of-bounds write in flsetgeneveopt...

7.8CVSS6.5AI score0.01377EPSS
SaveExploits6References6
Rows per page
Query Builder