Design/Logic Flaw

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26421

CVE-2020-26421 affects Wireshark; USB HID protocol dissector (and possibly other dissectors) in Wireshark 3.4.0 and 3.2.0–3.2.8 crashes, enabling denial of service via crafted captures or packet injection. Connected sources confirm the issue and document verifications/updates: Debian LTS fixed Wi...

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. A USB HID dissector crash allows an attacker to crash the application...

KLA12081 DoS vulnerabilities in Wireshark

DoSvulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. DoS vulnerability in the Kafka dissector can be exploited via special crafted file to cause denial of service. 2. DoS...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1901)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-25668: Fixed concurrency use-after-free in confontop bnc1178123. - CVE-2020-25656: Fixed race condition in kbd code bnc1177766. - CVE-2020-25285: A race conditio...

CVE-2020-12332

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12332

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12332

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12332

CVE-2020-12332 affects the Intel HID Event Filter Driver; the installer permissions flaw may allow an authenticated local user to escalate privileges. Intel’s advisory (and vendor posts) indicate all versions prior to 2.2.1.372 are affected. Mitigation: update to the latest driver version as prov...

Intel® HID Event Filter Driver Advisory

Summary: A potential security vulnerability in the Intel® Human Interface Device HID Event Filter Driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12332 Description: Improper permissions i...

DigitalPersona 4.5.0.2213 - (DpHostW) Unquoted Service Path Vulnerability

Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path Exploit Author : SamAlucard Vendor : DigitalPersona U. are U. One Touch Version : DigitalPersona Pro 4.5.0.2213 Vendor Homepage : https://www.hidglobal.com/crossmatch Tested on OS: Windows 10 Home Analyze PoC :...

DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path

Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path Exploit Author : SamAlucard Exploit Date: 2020-11-08 Vendor : DigitalPersona U. are U. One Touch Version : DigitalPersona Pro 4.5.0.2213 Vendor Homepage : https://www.hidglobal.com/crossmatch Tested on OS: Windows 10 Home...

Important: kernel

Issue Overview: An issue in the HID driver in the Linux kernel may lead to invalid memory access. CVE-2022-20565 In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in...

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...

kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver

A vulnerability was found in hiddevopen in drivers/hid/usbhid/hiddev.c in the USB Human Interface Device class subsystem, where an existing device must be validated prior to its access. The device should also ensure the hiddevlist cleanup occurs at failure, as this may lead to a use-after-free...