CVE-2020-15579: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via the KNOX API. The Samsung ID is SVE-2020-17318 July 2020...

PT-2020-14506

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue was discovered where FactoryCamera does not properly restrict runtime permissions. Recommendations For Samsung mobile devices with O8.x software, consider restricting access to the...

CVE-2020-15583: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

Design/Logic Flaw

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests...

PT-2020-14475

Name of the Vulnerable Software and Affected Versions Veeam Availability Suite versions prior to 10 Veeam Backup & Replication versions prior to 10 Description The issue is related to the VeeamFSR.sys driver, which has no device object DACL. This allows unprivileged users to achieve total control...

CVE-2020-15518: Missing Authorization

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests...

Access Control

cri-o is vulnerable to denial of service DoS. The infra container reparented to systemd following OOM Killer killing its conmon...

CVE-2020-5238

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

CVE-2020-5238

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2.36 cri-o security update

Red Hat OpenShift Container Platform release 4.2.36 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2020-5238: Improper Input Validation

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

RHEL 7 / 8 : OpenShift Container Platform 4.2.36 cri-o (RHSA-2020:2776)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2776 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario

A flaw was found in the Linux kernel, where it allows userspace processes, for example, a guest VM, to directly access h/w devices via its VFIO driver modules. The VFIO modules allow users to enable or disable access to the devices' MMIO memory address spaces. If a user attempts to access the...

CVE-2020-13835

An issue was discovered on Samsung mobile devices with O8.x with TEEGRIS software. The Gatekeeper Trustlet allows a brute-force attack on user credentials. The Samsung ID is SVE-2020-16908 June 2020...

CVE-2020-13834

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 with TEEGRIS software. Secure Folder does not properly restrict use of Android Debug Bridge adb for arbitrary installations. The Samsung ID is SVE-2020-17369 June 2020...

CVE-2020-13835

The CVE-2020-13835 issue affects Samsung mobile devices running O(8.x) with TEEGRIS, specifically involving the Gatekeeper Trustlet. The vulnerability stems from a brute-force weakness in the Trustlet that allows credential guessing, enabling a user credential brute-force attack. The issue is tie...

CVE-2020-13836

CVE-2020-13836 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). A path traversal vulnerability exists in the HWRResProvider that can lead to data exposure. This is documented across multiple sources (including NVD, Red Hat, CNVD, CVE lists) with the Samsung ID SVE-2020-16954. T...

CVE-2020-13831: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos 7570 chipsets software. The Trustonic Kinibi component allows arbitrary memory mapping. The Samsung ID is SVE-2019-16665 June 2020...

CVE-2020-13833: Improper Link Resolution Before File Access

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 June 2020...

CVE-2020-13836: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. HWRResProvider allows path traversal for data exposure. The Samsung ID is SVE-2020-16954 June 2020...