Lucene search
+L

1456 matches found

Cvelist
Cvelist
•added 2021/07/29 12:00 p.m.•35 views

CVE-2021-20505

The PowerVM Logical Partition MobilityLPM PowerVM Hypervisor FW920, FW930, FW940, and FW950 encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to...

4.4CVSS4.8AI score0.00546EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/29 12:00 a.m.•5 views

CVE-2021-20505: Undefined Security Weakness

The PowerVM Logical Partition MobilityLPM PowerVM Hypervisor FW920, FW930, FW940, and FW950 encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to...

4.4CVSS5.8AI score0.00546EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/07/28 6:10 a.m.•25 views

Security Bulletin: This Power System update is being released to address CVE 2021-20505

Summary POWER9: In response to a weakness in a set of PowerVM service procedures a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-20505. Vulnerability Details CVEID: CVE-2021-20505 DESCRIPTION: The PowerVM Logical Partition...

4.4CVSS0.7AI score0.00546EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/07/28 12:00 a.m.•8 views

CVE-2021-20505

The PowerVM Logical Partition MobilityLPM PowerVM Hypervisor FW920, FW930, FW940, and FW950 encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to...

4.4CVSS5.5AI score0.00546EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/02/12 12:00 a.m.•55 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3348: Fixed a use-after-free in nbdaddsocket that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point...

9.8CVSS7.2AI score0.06309EPSS
SaveExploits14References112
Tenable Nessus
Tenable Nessus
•added 2021/01/14 12:00 a.m.•63 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559. CVE-2020-27825: Fixed a race in the traceopen and buffer resi...

9.8CVSS6.9AI score0.02209EPSS
SaveExploits6References129
NVD
NVD
•added 2020/12/15 5:15 p.m.•28 views

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

7.2CVSS6.8AI score0.00476EPSS
SaveExploits1References4
OSV
OSV
•added 2020/12/15 5:15 p.m.•13 views

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

6.7CVSS7AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/12/15 5:15 p.m.•92 views

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

7.2CVSS6.7AI score0.00476EPSS
SaveExploits1References7
Prion
Prion
•added 2020/12/15 5:15 p.m.•41 views

Design/Logic Flaw

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

7.2CVSS6.4AI score0.00476EPSS
SaveExploits1References4Affected Software3
OSV
OSV
•added 2020/12/15 5:15 p.m.•14 views

UBUNTU-CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

6.7CVSS6.6AI score0.00476EPSS
SaveExploits1References8
CVE
CVE
•added 2020/12/15 4:57 p.m.•549 views

CVE-2020-27777

The CVE-2020-27777 issue concerns the Linux kernel on PowerPC: RTAS memory accesses in the userspace-to-kernel path allow a local, root-like user on a locked-down guest (Secure Boot) running on PowerVM or KVM/pseries to escalate privileges to the running kernel. Root cause is an improper handling...

7.2CVSS6.8AI score0.00476EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2020/11/23 8:51 p.m.•58 views

CVE-2020-27777

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running on top of PowerVM or KVM hypervisors pseries platform a root like local user could use this flaw to further increase their privileges to...

7.2CVSS1.6AI score0.00476EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2020/10/06 12:00 a.m.•32 views

PT-2020-6177 · Linux +8 · Linux +8

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. This issue allows a local user to increase their privileges to that of a running kernel on a...

9.8CVSS6.8AI score0.78684EPSS
SaveExploits178References2248
Tenable Nessus
Tenable Nessus
•added 2019/09/23 12:00 a.m.•60 views

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:2412-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following new features were implemented : jscSLE-4875: CML New device IDs for CML jscSLE-7294: Add cpufreq driver for Raspberry Pi fate322438: Integrate P9 XIVE support on PowerVM only fate322447: Ad...

10CVSS6.7AI score0.05254EPSS
SaveExploits23References305
UbuntuCve
UbuntuCve
•added 2019/06/24 12:00 p.m.•42 views

CVE-2019-12817

arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected...

7CVSS7AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder