285 matches found
PT-2025-54036
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to HID devices and uclogic handling. Specifically, an incorrect device reference for devm allocation of the input device name could lead to a...
PUB-A-245770596
In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
kernel: ALSA: jack: Access input_dev under mutex
In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is unregistered while calling sndjackreport, which causes NULL pointer dereference. In order to prevent this serialize access to inputdev using...
kernel: ALSA: jack: Access input_dev under mutex
In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is unregistered while calling sndjackreport, which causes NULL pointer dereference. In order to prevent this serialize access to inputdev using...
OESA-2022-1725 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were...
USN-5382-2: libinput vulnerability
USN-5382-1 fixed a vulnerability in libinput. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly handle input devices with specially crafted names. A local attacker with physic...
USN-5382-1: libinput vulnerability
Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly handle input devices with specially crafted names. A local attacker with physical access could use this to cause libinput to crash or expose sensitive information...
Windows 10 Endpoints Are Not Redirecting Input Devices Properly And Output Redirection Works Fine
This Local Policy Settings must be enabled within the VDA and Endpoint: Local Group Policy Editor: "Computer Configuration Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Device and Resource Redirection" Allow Audio And Video Playback Redirection...
PT-2021-8083 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the incorrect initialization of dev-work after calling input register device in the appletouch component of the Linux kernel. This may cause a warning in flush...
openSUSE 15 Security Update : barrier (openSUSE-SU-2021:1595-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1595-1 advisory. - An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficient...
CVE-2021-42073
An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...
Design/Logic Flaw
An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...
CVE-2021-42073
CVE-2021-42073 affects Barrier before 2.4.0. An attacker can join an active Barrier server session by supplying a valid client label (default is “Unnamed,” but can be inferred from publicly available hostnames). In an active session, the attacker can capture input device events from the server an...
CVE-2021-42073
An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...
Moderate: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update
An update is now available for Red Hat Virtualization Engine 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CVE-2019-19524
A use-after-free flaw was found in the Linux kernel’s input device driver functionality when unplugging a device. A user with physical access could use this flaw to crash the system. Mitigation To mitigate this issue for the Red Hat Enterprise Linux 7 or higher version, prevent module ff-memless...
CVE-2017-18079
drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact because the port-exists value can change after it is validated...
MS-DOS: Arbitrary command execution in MS-DOS
Versions 1.1 and 2.0 of MS-DOS allow a malicious actor to execute arbitrary system commands via the main application interface. Prerequisites: MS-DOS 1.1 or MS-DOS 2.0 installation Input device e.g. keyboard Steps to reproduce: Enter the command mode Type VER to make sure that the system is on of...
UBUNTU-CVE-2013-2190
The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...