Yeti - Your Everyday Threat Intelligence

Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository. Yeti will also automatically enrich observables e.g. resolve domains, geolocate IPs so that you don't have to. Yeti provides an interface for humans shiny...

"Connection is unsuccessful" error when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1

"Connection is unsuccessful" error when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1 This article describes an issue that occurs when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1. An update is available to fix this issue...

kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver

A vulnerability was found in hiddevopen in drivers/hid/usbhid/hiddev.c in the USB Human Interface Device class subsystem, where an existing device must be validated prior to its access. The device should also ensure the hiddevlist cleanup occurs at failure, as this may lead to a use-after-free...

Multiple Apple Products IOHIDFamily Component Buffer Overflow Vulnerability

Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. iOHIDFamily is one of the kernel extensions abstract interfaces to human interface devices components. Abstract Interface for Human...

UBUNTU-CVE-2019-19532

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c,...

kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command

A flaw was found in the Linux kernel's implementation of the Bluetooth Human Interface Device Protocol HIDP. A local attacker with access permissions to the Bluetooth device can issue an IOCTL which will trigger the dohidpsockioctl function in net/bluetooth/hidp/sock.c.c. This function can leak...

The vulnerability of the parse_hid_report_descriptor() function in the Linux operating system allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the parsehidreportdescriptor function in the Linux operating system is related to writing beyond buffer boundaries during debugging messages generation. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected...

PT-2019-4477 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.10 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/hid/usbhid/hiddev.c driver. This bug can be triggered by a malicious USB device, potentially...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4076-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4076-1 advisory. It was discovered that a race condition existed in the Serial Attached SCSI SAS implementation in the Linux kernel. A local attacker could possibly use...

Ubuntu: Security Advisory (USN-4069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4069-1)

It was discovered that an integer overflow existed in the Linux kernel when reference counting pages, leading to potential use-after-free issues. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-11487 Jann Horn discovered that ...

Linux kernel information disclosure vulnerability (CNVD-2019-14717)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the 'dohidpsockioctl' function in the net/bluetooth/hidp/sock.c file in versions of Linux kernel prior to 5.0.15, whi...

Multiple Apple Products IOHIDFamily Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. iOHIDFamily is one of the kernel extensions abstract interfaces to human-computer interface devices...

The vulnerability of the `hiddebugevents_read` function in the Android operating system, which allows a hacker to escalate their privileges

The vulnerability of the hiddebugeventsread function drivers/hid/hid-debug.c in the Android operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2019-0600

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601...

Information disclosure

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600...

CVE-2019-0601

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600...

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

HID Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the victim’s system. To exploit the vulnerability, an attack...