16 matches found
EUVD-2012-3670
Malware in sbrugna...
EUVD-2022-33585
Malicious code in bioql PyPI...
CVE-2022-29223
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
Important: kernel
Issue Overview: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests. CVE-2023-34324 An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic...
CVE-2022-29223
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
Buffer overflow
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
CVE-2022-29223
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with "bNbPorts" set to a value greater than "UXMAXTT" which defaults to 8. For a "bNbPorts"...
CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
Microsoft Azure RTOS USBX security vulnerability
Microsoft Azure RTOS USBX is a high-performance USB host, device, and mobile OTG embedded stack open-sourced by Microsoft in the United States and fully integrated with Azure RTOS ThreadX. A security vulnerability exists in Microsoft Azure RTOS USBX versions prior to 6.1.10. An attacker exploits...
CVE-2022-29223: Buffer Copy without Checking Size of Input
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
PT-2022-19475
Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.1.10 Description The issue arises when an attacker provides a HUB descriptor with bNbPorts set to a value greater than UX MAX TT, which defaults to 8, causing a buffer overflow in the Azure RTOS USBX host...
CVE-2012-3723
Apple Mac OS X prior to 10.7.5 is affected by CVE-2012-3723 due to improper handling of the bNbrPorts field in USB hub descriptors. This memory corruption vulnerability allows physically proximate attackers to run arbitrary code or cause a denial of service by attaching a USB device. Fix: update ...
PT-2012-4963
Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.5 Description The issue arises from improper handling of the bNbrPorts field of a USB hub descriptor. This allows physically proximate attackers to execute arbitrary code or cause a denial of service, resulting ...
CVE-2012-3723: Improper Restriction of Operations within the Bounds of a Memory Buffer
Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption and system crash by attaching a USB device...