grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the GNU community. A buffer overflow vulnerability exists in grub2 versions prior to 2.06 in the grubusbdeviceinitialize function, which handles USB device initialization. No details of the vulnerability are provided at this time...

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c

A reachable assertion vulnerability was found in the USB EHCI emulation code of QEMU. This issue occurs while processing USB requests due to missed handling of DMA memory map failure. This flaw allows a malicious privileged user within the guest to send bogus USB requests and crash the QEMU proce...

The vulnerability of the USB DeviceHandler component in the Google Chrome web browser allows a perpetrator to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the USB DeviceHandler component in the Google Chrome web browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity, confidentiality, and accessibility of the protected...

DEBIAN-CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

DEBIAN-CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

UBUNTU-CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

UBUNTU-CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

LG Mobile Devices With Android OS Resource Management Error Vulnerability

LG mobile is a line of mobile device products from LG. LG Mobile devices Google Android OS 8.0, 8.1, 9.0, and 10 software suffer from a resource management error vulnerability that stems from the USB laf gadget having a use-after-free...

Apple IO Model Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. Apple IO Model suffers from a buffer error vulnerability that stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigger an...

Apple Model I/O Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. A security vulnerability exists in Apple Model I/O. The vulnerability stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigg...

Wireshark 资源管理错误漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

Qualcomm Connectivity Code Issue Vulnerability

Qualcomm Connectivity is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm Connectivity that originates from an untrusted pointer dereference when making USB control transfers if multiple requests are made from different standard request...

The vulnerability of the uvc_scan_chain_forward function in Android operating system USB drivers allows a hacker to increase their privileges.

The vulnerability of the uvcscanchainforward function in the Android operating system’s USB driver is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

UBUNTU-CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

Wireshark 缓冲区错误漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

DEBIAN-CVE-2020-25723

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on t...

Cisco AsyncOS 操作系统命令注入漏洞

Cisco AsyncOS is an operating system for Cisco devices from Cisco USA. Cisco AsyncOS for the Cisco Secure Web Appliance suffers from an operating system command injection vulnerability that stems from insufficient validation of user-supplied web interface and CLI input. The vulnerability can be...

PT-2020-6485

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileg...