[SECURITY] [DLA 3604-1] qemu security update

Debian LTS Advisory DLA-3604-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 05, 2023 https://wiki.debian.org/LTS Package : qemu Version : 1:3.1+dfsg-8+deb10u11 CVE ID : CVE-2020-24165 CVE-2023-0330 CVE-2023-3180 Debian Bug : 1029155 Multiple issues were...

CVE-2023-30732

Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the lack of a speculative execution protection policy for the arm64 boot CPU...

PT-2023-32073 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when the check for the SMCCC workaround is called before SMCCC support has been initialized on CPU 0. This results in no speculative...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip that stems from a memory...

PT-2023-24150 · Qualcomm · Snapdragon +119

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the DSP Service during a remote call from HLOS to DSP. No information is provided about the...

PT-2023-24153 · Qualcomm · Snapdragon +59

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while parsing the ADSP response command. No information is provided about the estimated number of...

CVE-2023-41911

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free issue 1 of 2...

New security features in Windows 11 protect users and empower IT

While attacks are getting more sophisticated, so are our defenses. With recent innovations like secured-core PCs that are 60 percent more resilient to malware than non-secured-core PCs,1 and the Microsoft Pluton Security Processor that adds more protection by isolating sensitive data like...

SUSE: Security Advisory (SUSE-SU-2023:3695-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the template processor for viewing electronic documents in PDF format, specifically Foxit PDF Reader, arises from the use of memory after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the template processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader, is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Samsung Mobile Processor Exynos 2200 Resource Management Error Vulnerability

SAMSUNG mobile is a cell phone from South Korea's Samsung SAMSUNG. A security vulnerability exists in the Samsung Mobile Processor Exynos 2200 version, which stems from a post-release reuse vulnerability in the GPU. The vulnerability can be exploited by an attacker to elevate privileges...

CVE-2023-42482

Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free...

CVE-2023-42482

Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free...

USN-6386-1 linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities

Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from division operations in certain situations. A local attacker could possibly use this to expose sensitive information. CVE-2023-20588 It was discovered...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

Integer overflow

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application...

PT-2023-27334 · Samsung · Samsung Mobile Processor Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor versions 1280, 1380, 2100, 2200, 980, 9820 Description: An issue was discovered in the NPU kernel driver, allowing an integer overflow to bypass detection of error cases via a crafted application...

Linux kernel conditional contention vulnerability (CNVD-2023-71721)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a conditional contention vulnerability, which arises from a KVM in the Linux kernel with Secure Encrypted Virtualization SEV AMD processor...

HPESBHF04534 rev.2 - HPE Superdome Flex and Superdome Flex 280 Servers INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to v3.80.24 HPE Superdome Flex 280 Server - Prior to v1.60.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...