tensorflow-io-nightly (>=0.20.0.dev20210708201251, <=0.20.0.dev20210804183732), tensorflow-text (2.6.0rc0) potentially affected by CVE-2021-41217 via tensorflow (2.7.0rc1)

tensorflow PYPI version 2.7.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - tensorflow-io-nightly =0.20.0.dev20210708201251, =0.20.0.dev20210804183732 - tensorflow-text 2.6.0rc0 Source cves: CVE-2021-41217 Source...

tensorflow-io-nightly (>=0.20.0.dev20210708201251, <=0.20.0.dev20210804183732), tensorflow-text (2.6.0rc0) potentially affected by CVE-2021-41197 via tensorflow (2.7.0rc1)

tensorflow PYPI version 2.7.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - tensorflow-io-nightly =0.20.0.dev20210708201251, =0.20.0.dev20210804183732 - tensorflow-text 2.6.0rc0 Source cves: CVE-2021-41197 Source...

tensorflow-io-nightly (>=0.20.0.dev20210708201251, <=0.20.0.dev20210804183732), tensorflow-text (2.6.0rc0) potentially affected by CVE-2021-41201 via tensorflow (2.7.0rc1)

tensorflow PYPI version 2.7.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - tensorflow-io-nightly =0.20.0.dev20210708201251, =0.20.0.dev20210804183732 - tensorflow-text 2.6.0rc0 Source cves: CVE-2021-41201 Source...

Hitachi Energy Relion 670/650/SAM600-IO

1. EXECUTIVE SUMMARY CVSS v3 8.1 Vendor: Hitachi Energy Equipment: Relion 670/650/SAM600-IO Vulnerability: Insecure Default Initialization of Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could hijack existing TCP sessions to inject packets of their choosing or cause...

CVE-2021-35535

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

CVE-2021-36924

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow leading to Escalation of Privileges, Denial of Service, and Code Execution via a crafted Device IO Control packet to a device...

CVE-2021-36922

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

Information disclosure

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosur...

CVE-2021-36925

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a...

CVE-2021-36922

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

PT-2021-21409

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve unauthorized access to USB devices, potentially leading to escalation of privileges, denial...

CVE-2021-36925: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a...

CVE-2021-36922: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

PT-2021-21412

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve arbitrary read or write operations from/to physical memory, leading to Escalation of...

PT-2021-21411

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve a pool overflow, leading to Escalation of Privileges, Denial of Service, and Code Execution...

CGAL SNC_io_parser Heap Buffer Overflow DoS

The vulnerability of the SNCioparser::readsloop function in the NefS2/SNCioparser.h library of the CGAL algorithm library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrit...

matio:matio_fuzzer: Index-out-of-bounds in H5D__chunk_io_init_selections

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6101521998151680 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Index-out-of-bounds Cra...

PT-2021-30167

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.11 Description The issue concerns the io uring feature, which allows for conditional reschedule for intensive iterators. The actual impact and attack plausibility have not yet been proven. Recommendations F...

Security Bulletin: Multiple Security Vulnerabilities Have been addressed in IBM Security Access Manager

Summary Multiple Security Vulnerabilities have been fixed in the IBM Security Access Manager ISAM version 9.0.7.2 Vulnerability Details CVEID: CVE-2019-10208 DESCRIPTION: PostgreSQL is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to the...

kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks

A flaw was found in the Linux kernel’s KVM implementation, where improper handing of the VMIO|VMPFNMAP VMAs in KVM bypasses RO checks and leads to pages being freed while still accessible by the VMM and guest. This flaw allows users who can start and control a VM to read/write random pages of...