228 matches found
Linux kernel Use-After-Free
The vulnerability of the Linux operating system’s driver/usb/host/max3421-hcd.c component is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
UBUNTU-CVE-2021-38204
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service use-after-free and panic by removing a MAX-3421 USB device in certain situations...
PT-2021-1516 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.6 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/usb/host/max3421-hcd.c component. This vulnerability can be exploited by physically...
CVE-2020-27661
A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...
CVE-2020-27661: Divide By Zero
A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...
SUSE: Security Advisory (SUSE-SU-2021:1244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Use-After-Free
QEMU 5.0.0 has a use-after-free. The vulnerability exists in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked which allows an attacker to cause an application crash...
CVE-2020-25624
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...
CVE-2020-25624: Out-of-bounds Read
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...
PT-2020-6734
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A divide-by-zero issue was found in the dwc2 handle packet function in the hw/usb/hcd-dwc2.c file of the hcd-dwc2 USB host controller emulation. This issue could be exploited by a malicious gues...
QEMU infinite loop vulnerability
QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. An infinite loop vulnerability exists in hw/usb/hcd-ohci.c in QEMU 5.0.0 when the TD list has a loop. An attacker can exploit this...
QEMU Reuse After Release Vulnerability
QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. QEMU has a security vulnerability that originates from hw/usb/hcd-ehci.c that forces the use of a freed memory area to trigge...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
DEBIAN-CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
Code injection
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...
CVE-2020-25625
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...
CVE-2020-25625
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...