155 matches found
SUSE CVE-2012-2373
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension PAE is enabled, does not properly use the Page Middle Directory PMD, which allows local users to cause a denial of service panic via a crafted application that triggers a race condition...
SUSE CVE-2012-3433
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service domain 0 VCPU hang and kernel panic by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown...
CVE-2022-2379
The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc...
VulnCheck KEV: CVE-2017-15302
In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver e.g., cpuz143x64.sys for version 1.43 that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running...
PT-2025-37622
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc3+ 490 Description: The Linux kernel contained a flaw in the ACPI subsystem where calling acpi os map memory on an invalid physical address could lead to a warning and potentially an oops/stacktrace. Thi...
CVE-2021-44078
An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code in the target sandbox in order to exploit this vulnerability. The specific flaw exists within the...
OPENSUSE-SU-2021:2858-1 Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufpalloc bsc1189145, CVE-2021-3682 - NULL pointer dereference in ESP bsc1180433, CVE-2020-35504 bsc1180434, CVE-2020-35505 bsc1180435, CVE-2020-35506 - NULL pointer dereference iss...
CVE-2020-11230
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the eHCA driver on PowerPC architectures that allowed a local user to access 60k of physical address space. This address space could contain sensitive information...
CVE-2018-6240
NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address...
CVE-2018-6240
NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address...
CVE-2019-0174
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...
CVE-2019-0174
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...
CVE-2019-0174
CVE-2019-0174 is a RAMBleed-style information-disclosure vulnerability in certain Intel microprocessors where a local attacker could potentially disclose partial physical addresses. Intel’s advisory (Intel SA-00247) lists affected families (e.g., Core X-series, 4th Gen Core i5/i3, Pentium, Xeon E...
CVE-2019-0174
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...
Partial Physical Address Leakage Vulnerability - Lenovo Support US
No description provided...
EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1506)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before...
ASPEED AST-series BMC Vulnerability - US
Lenovo Security Advisory: LEN-26252 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-6260 Summary Description: An industry-wide vulnerability affecting ASPEED AST-series Baseboard Management Controllers BMCs used in certain servers and...
CVE-2019-6260
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...
CVE-2019-6260
The ASPEED ast2400 and ast2500 Baseband Management Controller BMC hardware and firmware implement Advanced High-performance Bus AHB bridges, which allow arbitrary read and write access to the BMC's physical address space from the host or from the network in unusual cases where the BMC console uar...