CVE-2019-19537

A flaw was found in the Linux kernel, where there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer. An attacker who can hotplug at least two devices of this class can cause a use-after-free situation. Mitigation Many Character devices c...

CVE-2019-12611

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the...

Design/Logic Flaw

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of th...

CVE-2018-4851

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of th...

CVE-2017-17143

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100;...

Intel Issues Updated Spectre Firmware Fixes For Newer Processors

Intel has issued updated microcode to help protect its newer processors from Spectre security exploits. The Santa Clara, Calif.-based company’s new microcode updates – which impact its newer chip platforms, such as Kaby Lake, Coffee Lake, and Skylake – have been released to OEM customers and...

Intel Warns Users Not to Install Its 'Faulty' Meltdown and Spectre Patches

Don't install Intel's patches for Spectre and Meltdown chip vulnerabilities. Intel on Monday warned that you should stop deploying its current versions of Spectre/Meltdown patches, which Linux creator Linus Torvalds calls 'complete and utter garbage.' Spectre and Meltdown are security...

Xen Denial of Service Vulnerability (CNVD-2018-04061)

Xen is an open source virtual machine monitor. A security vulnerability exists in Xen version 4.10. An attacker can exploit the vulnerability by rebooting multiple times to cause a denial of service host memory consumption...

Security Advisory - Multiple Vulnerabilites in SIP Module on Huawei Products

There is an overflow vulnerability on the SIP module that attacker can exploit by sending a specially crafted SIP message, leading to a process reboot at random. Vulnerability ID: HWPSIRT-2017-06044 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2017-17142...

The vulnerability of Airtame HDMI adapter’s microprogramming software, related to access control deficiencies, allows a intruder to gain unauthorized access to the control interface.

The vulnerability of the Airtame HDMI adapter’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the control interface. This could result in forced system reboots,...

The vulnerability of the Mediaserver application in the Android operating system allows a hacker to cause a service failure, freeze the device, and force it to restart.

The vulnerability of the Mediaserver application in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...

The vulnerability of the Mediaserver application’s libhevc service allows a hacker to cause the device to freeze and restart.

The vulnerability of the Mediaserver application’s libhevc service is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and device reboots through a specially created file...

The vulnerabilities of the EnergyWise module in the Cisco IOS operating system allow a hacker to trigger buffer overflows or equipment reboots, accompanied by a failure in service delivery.

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

The vulnerabilities of the EnergyWise module in the Cisco IOS operating system allow a hacker to trigger buffer overflows or equipment reboots, accompanied by a failure in service delivery.

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

The vulnerabilities of the EnergyWise module in the Cisco IOS operating system allow a hacker to trigger buffer overflows or equipment reboots, accompanied by a failure in service delivery.

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mediaserver component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a specially crafted file...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mediaserver component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a specially crafte...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Android operating system’s Telephony component is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions device freezing and reboots...

Denial of Service Vulnerability in Multiple Huawei Products

Huawei S12700 and others are intelligent routing switches from Huawei China. A denial of service vulnerability exists in several Huawei products, which stems from a lack of input detection in the program. A remote attacker can exploit the vulnerability by sending specially crafted Resource...

Denial of service vulnerability in multiple Huawei switches

Huawei S12700, S5700, S6700, S7700, S9700 are switching devices from Huawei China. A denial of service vulnerability exists in multiple Huawei switches. Due to the lack of input checksums on the device, a remote attacker can exploit the vulnerability to construct malformed Resource Reservation...