CVE-2020-8695

A vulnerability was found in Intel's implementation of RAPL Running Average Power Limit. An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem. Mitigation Until a firmwar...

Low: Red Hat Security Advisory: fence-agents security and bug fix update

An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2019-0155

A flaw was found in the Intel graphics hardware GPU, where a local attacker with the ability to issue commands to the GPU could inadvertently lead to memory corruption and possible privilege escalation. The attacker could use the GPU blitter to perform privilege MMIO operations, not limited to th...

New Noise-Resilient Attack On Intel and AMD CPUs Makes Flush-based Attacks Effective

Modern Intel and AMD processors are susceptible to a new form of side-channel attack that makes flush-based cache attacks resilient to system noise, newly published research shared with The Hacker News has revealed. The findings are from a paper "DABANGG: Time for Fearless Flush based Cache...

Arbitrary Code Execution

qemu-kvm is vulnerable to arbitrary code execution. The vulnerability exists as it was found that the PIIX4 Power Management emulation layer in qemu-kvm did not properly check for hot plug eligibility during device removals. A privileged guest user could use this flaw to crash the guest or,...

CVE-2019-0154

A flaw was found in Intel graphics hardware GPU where a local attacker with the ability to issue an ioctl could trigger a hardware level crash if MMIO registers were read while the graphics card was in a low-power state. This creates a denial of service situation and the GPU and connected display...

CVE-2019-14615

An information disclosure flaw was found in the Linux kernel. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an attached i915 device. The highest threat from this vulnerability i...

CVE-2020-8832

An information disclosure flaw was found in the Linux kernel. The original fix for CVE-2019-14615 was deemed to be incomplete. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an...

Lenovo Power Management Driver Denial of Service Vulnerability

Lenovo Power Management is a system designed by Lenovo specifically for notebook computers to manage notebook power. It provides control of the performance and power consumption of various components of the laptop through a combination of software and hardware. A denial of service vulnerability...

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service (PoC)

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service PoC Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref :...

Lenovo Power Management Driver 1.67.17.48 - (pmdrvs.sys) Denial of Service Exploit

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref : https://support.lenovo.com/us/fr/solutions/len-29334 Description A...

Lenovo Power Management Driver Buffer Overflow

Exploit Title: Lenovo Power Management Driver "pmdrvs.sys" - Buffer Overflow Date: 11/12/2019 Exploit Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

CVE-2019-6192

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service...

Buffer overflow

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service...

CVE-2019-6192

CVE-2019-6192 affects Lenovo Power Management Driver (pmdrvs.sys) prior to 1.67.17.48. The vulnerability is a buffer overflow when processing IOCTL codes, leading to local denial of service and, per exploit references, potential kernel-space impact. Public PoC content exists (PoC in Exploit-DB an...

Lenovo Power Management Driver CVE-2019-6192 Local Buffer Overflow Vulnerability

Description Lenovo Power Management Driver is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to cause denial of service conditions. Due to the natur...

Linux kernel memory leak vulnerability (CNVD-2019-41265)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the acphwinit function in drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in versions of...

Lenovo Power Management Driver Vulnerability - Lenovo Support US

No description provided...

Lenovo Power Management Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-29334 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6192 Summary Description: A potential vulnerability has been reported in the Lenovo Power Management Driver which could lead to a denial of service...