UBUNTU-CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...

PT-2020-16156 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability was found in the Linux kernel where a non-blocking socket in the llcp sock connect function leads to a leak and eventually causes the system to hang. Recommendations: A...

Unspecified vulnerability in Linux kernel (CNVD-2019-38532)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the llcpsockcreate function in the net/nfc/llcpsock.c file in the AFNFC network module in Linux kernel 5.3.2 and earlier. An attacke...

UBUNTU-CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

PT-2019-5696

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the llcp sock create function in the AF NFC network module, which does not properly enforce the CAP NET RAW capability. This means that unprivileged users can create a raw...

CVE-2018-9563

In llcputilparsecc of llcputil.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...

PT-2019-11156

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse connect function of llcp util.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2019-11157

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse cc function of llcp util.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2019-11158

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse link params function due to a missing bounds check. This could lead to local information disclosure with no additional...

PT-2019-16123

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound read in the llcp dlc proc rr rnr pdu function of llcp dlc.cc, due to a missing bounds check. This could lead to local information disclosure with no...

UBUNTU-CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfcllcpbuildgb in net/nfc/llcpcore...

PT-2019-5417

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.20.15 Description The issue is related to the nfc llcp build tlv function in the Linux kernel, which may return NULL. If the caller does not check for this, it will trigger a null pointer dereference, causing a...

PT-2019-11172

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to an integer overflow in the llcp link proc agf pdu function of llcp link.cc, which could lead to a possible out of bounds read. This may result in local information disclosure...

PT-2019-11171

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to an incorrect bounds check in the llcp dlc proc i pdu function of llcp dlc.cc, which could lead to a possible out of bounds read. This may result in local information disclosu...

PT-2018-19023

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the nfc llcp build sdreq tlv function of llcp commands.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...

UBUNTU-CVE-2013-3233

The llcpsockrecvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable and a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2013-4241

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the llcp sock recvmsg function in net/nfc/llcp/sock.c not initializing a certain length...