Session fixation

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

Information disclosure

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8582

CVE-2020-8582 affects Element Software before 12.2 and HCI before 1.8P1. The vulnerability is an information disclosure requiring authentication, enabling an authenticated user to view sensitive information. No specific technical details, CVE root cause, affected components, exploit path, or miti...

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-8583

CVE-2020-8583 affects Element Software before 12.2 and HCI before 1.8P1. The vulnerability allows an attacker to discover sensitive information by intercepting data in an HTTPS session. In the provided documents, the affected versions and the nature of the exposure are stated, with high-impact co...

PT-2020-20223

Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an authenticated user to view sensitive information. Recommendations For Element Software versions prior to 12.2, update to version 12.2 or later...

CVE-2020-8583: Undefined Security Weakness

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-8582: Undefined Security Weakness

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

PT-2020-20224

Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session. Recommendations For Element Software...

Veeam Support for Azure Local

Azure Local is the new name for Azure Stack HCI Azure Stack HCI is now considered part of Azure Local. Learn more about this rename in the Microsoft Documentation: Renaming Azure Stack HCI to Azure Local. Purpose This article documents support for backup, restore, and replication of virtual machi...

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

Illegal Address Access Vulnerability in Hcidump

Hcidump is a tool for capturing and analyzing hci packets and supports reading local hci traffic packets. Hcidump suffers from an illegal address access vulnerability. An attacker could exploit this vulnerability to cause the program to crash...

Hcidump suffers from a heap overflow vulnerability (CNVD-2020-62739)

Hcidump is a tool for capturing and analyzing hci packets and supports reading local hci traffic packets. Hcidump suffers from a heap overflow vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Linux net/bluetooth/hci_event.c Heap Buffer Overflow DoS

The vulnerability of the net/bluetooth/hcievent.c component in Linux operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions using specially crafted L2CAP packets...

USN-4592-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

hci-research.de Cross Site Scripting vulnerability OBB-1418674

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Google Warns of Zero-Click Bluetooth Flaws in Linux-based Devices

Google security researchers are warning of a new set of zero-click vulnerabilities in the Linux Bluetooth software stack that can allow a nearby unauthenticated, remote attacker to execute arbitrary code with kernel privileges on vulnerable devices. According to security engineer Andy Nguyen, the...

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...