UBUNTU-CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

GRUB2 bootloader is vulnerable to buffer overflow

Overview The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled. Description GRUB2 is a multiboot boot loader that replaced GRUB Legacy in 2012. A boot loader is the first program that runs upon...

Debian DLA-2290-1 : e2fsprogs security update

An issue has been found in e2fsprogs, a package that contains ext2/ext3/ext4 file system utilities. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. For Debian 9 stretc...

CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

Improper access control

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

CVE-2019-18618

CVE-2019-18618 concerns the Synaptics VFS75xx fingerprint sensors with external flash. The firmware exposes an incorrect access control vulnerability that, on all versions prior to 2019-11-15, can let a local administrator or physical attacker access sensor data by injecting an unverified partiti...

CVE-2019-18618: Undefined Security Weakness

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

PT-2020-9975

Name of the Vulnerable Software and Affected Versions: Synaptics VFS75xx family fingerprint sensors versions prior to 2019-11-15 Description: The issue concerns incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash. This allows a loca...

Android Users Hit with 'Undeletable' Adware

UPDATE A healthy percentage of Android users targeted by mobile malware or mobile adware last year suffered a system partition infection, making the malicious files virtually undeletable. That’s according to research from Kaspersky, which found that 14.8 percent of its users who suffered such...

Pig in a poke: smartphone adware

Our support team continues to receive more and more requests from users complaining about intrusive ads on their smartphones from unknown sources. In some cases, the solution is quite simple. In others, the task is far harder: the adware plants itself in the system partition, and trying to get ri...

EulerOS 2.0 SP2 : e2fsprogs (EulerOS-SA-2020-1665)

According to the version of the e2fsprogs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory ca...

CVE-2020-13843

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 June 2020...

CVE-2020-13843

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 June 2020...

Design/Logic Flaw

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 June 2020...

CVE-2020-13843

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 June 2020...

CVE-2020-13843

Technical details about CVE-2020-13843 are not provided in the supplied documents; monitor for updates.

PT-2020-13724

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS software before 2020-06-01 Description An issue allows local users to cause a denial of service due to mishandled checking of the userdata partition. Recommendations For LG mobile devices with Android OS...

CVE-2020-13843: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 June 2020...

[SECURITY] Fedora 31 Update: slurm-19.05.7-1.fc31

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...