[SECURITY] Fedora 32 Update: kpmcore-4.2.0-1.fc32

KPMcore contains common code for managing partitions by KDE Partition Manag er and other KDE projects...

CVE-2020-27187: Undefined Security Weakness

An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcoreexternalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related...

PT-2020-16655

Name of the Vulnerable Software and Affected Versions KDE Partition Manager versions 4.1.0 through 4.1.x Description A logic flaw exists in the kpmcore externalcommand helper of KDE Partition Manager, where the service invoking D-Bus is not properly checked. This allows an attacker on the local...

Fedora: Security Advisory for kpmcore (FEDORA-2020-da859aadde)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for kde-partitionmanager (FEDORA-2020-73471e6414)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: kpmcore-4.2.0-1.fc33

KPMcore contains common code for managing partitions by KDE Partition Manag er and other KDE projects...

[SECURITY] Fedora 33 Update: kde-partitionmanager-4.2.0-1.fc33

KDE Partition Manager is a utility program to help you manage the disk devi ces, partitions and file systems on your computer. It allows you to easily creat e, copy, move, delete, resize without losing data, backup and restore partitio ns. KDE Partition Manager supports a large number of file...

Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability

A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense FTD Software for interfaces that are configured either as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due t...

PT-2020-4471

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the ingress packet processing path could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition due to...

CentOS 7 : e2fsprogs (RHSA-2020:4011)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4011 advisory. - An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause ...

Acronis: DLL Hijacking when performing operations in Acronis Secure Zone partition leading to Privilege Escalation

Vulnerability description not provided...

Arbitrary Code Execution

e2fsprogs is vulnerable to arbitrary code execution. The vulnerability exists through arafted ext4 partition that leads to out-of-bounds write...

e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability...

CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

CVE-2019-10527

CVE-2019-10527 affects Snapdragon Auto/Compute/Connectivity and related Snapdragon families. The root cause is manipulation of the SMEM (shared memory) partition in a scenario where the HLOS is compromised, which can allow access to memory outside the SMEM address range and lead to memory corrupt...

CVE-2019-10527: Improper Validation of Array Index

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

PT-2020-9064

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions APQ8009 through SM8250 Qualcomm Snapdragon Compute versions APQ8009 through SM8250 Qualcomm Snapdragon Connectivity versions APQ8009 through SM8250 Qualcomm Snapdragon Consumer Electronics Connectivity version...

DEBIAN-CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

ALPINE-CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...