Marvell Avastar wireless SoCs have multiple vulnerabilities

Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...

HEVD pool overflow analysis-vulnerability warning-the black bar safety net

Prepare the environment Win 10 64-bit host + win 7 32-bit virtual machine Windbg: a debugger VirtualKD-3.0: double-click the debug tool InstDrv: the drive is installed, run the tool HEVD: a Windows kernel vulnerability training project, which almost covers the kernel may exist, all vulnerability...

WIBU-SYSTEMS WibuKey.sys 0x8200E804 pool corruption privilege escalation vulnerability

Summary An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation...

CVE-2018-2245

CVE-2018-2245 is rejected/not used; this candidate is not an active vulnerability entry.

CVE-2018-2194

CVE-2018-2194 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2177

CVE-2018-2177 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2288

CVE-2018-2288 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2304

CVE-2018-2304 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2144

CVE-2018-2144 is marked as rejected; this entry does not represent an active vulnerability.

CVE-2018-2341

CVE-2018-2341 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2171

This CVE entry is rejected and not used; DO NOT rely on CVE-2018-2171 as an active vulnerability record.

CVE-2018-2102

CVE-2018-2102 is rejected and not used, per the Initial Description.

CVE-2018-2207

CVE-2018-2207 entry is rejected/not used; this candidate was in a CNA pool and not assigned to issues.

CVE-2018-2101

This CVE entry is rejected and not used; CVE-2018-2101 does not represent an active vulnerability.

CVE-2018-2208

CVE-2018-2208 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2018-2183

CVE-2018-2183 is rejected and does not represent an active vulnerability entry.

CVE-2018-2268

CVE-2018-2268 is rejected/not used per the Initial Description.

CVE-2018-2296

CVE-2018-2296 entry is rejected and not used per description.

CVE-2018-2345

CVE-2018-2345 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2116

CVE-2018-2116 is rejected and not used as stated in the description.