Information disclosure

Windows USB Serial Driver Information Disclosure Vulnerability...

Windows USB Serial Driver Information Disclosure Vulnerability

...

CVE-2022-38030 Windows USB Serial Driver Information Disclosure Vulnerability

...

Microsoft Windows USB Serial Driver security vulnerabilities

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows USB Serial Driver is vulnerable to information disclosure, which stems from insufficient protection of sensitive information on network systems or products, and can be exploited b...

CVE-2022-38030 Windows USB Serial Driver Information Disclosure Vulnerability

...

CVE-2022-38030: Undefined Security Weakness

Windows USB Serial Driver Information Disclosure Vulnerability...

PT-2022-5369 · Microsoft · Windows Usb Serial Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Serial Driver affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows USB Serial Driver, which can be exploited to gain unauthorized access to confidential...

CVE-2022-38030

Technical details about CVE-2022-38030 are not provided in the supplied documents. Public information about affected product versions, exploitation status, and fixes is not available here; monitor for updates from official advisories.

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9871)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9871 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566753 CVE-2022-3028 - lockdown: also lock down previous kgdb use Daniel Thompson...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9870)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9870 advisory. - afkey: Do not call xfrmprobealgs in parallel Herbert Xu Orabug: 34566753 CVE-2022-3028 - lockdown: also lock down previous kgdb use Daniel Thompson...

CVE-2022-36063 USBX Host CDC ECM integer underflow with buffer overflow

Azure RTOS USBx is a USB host, device, and on-the-go OTG embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an integer underflow and a buffer overflow in th...

CVE-2022-39848

Exposure of sensitive information in ATDistributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log...

Samsung Mobile Devices Information Leakage Vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2022 Release 1 version, which originates from exposing sensitive information in ATDistributor. A local...

AZL-11080 CVE-2022-41849 affecting package kernel for versions less than 5.15.82.1-1

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open, aka a race condition between ufxopsopen and ufxusbdisconnect...

UBUNTU-CVE-2022-41849

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open, aka a race condition between ufxopsopen and ufxusbdisconnect...

pyFlipper - Unoffical Flipper Zero Cli Wrapper Written In Python

Unoffical Flipper Zero cli wrapper written in Python Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Setup instructions: $ git clone https://github.com/wh00hw/pyFlipper.git $ cd pyFlipper $ python3 -m venv venv $ source venv/bin/activate $ pip install -r...

PT-2022-23883

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.8 Description The issue is related to a crash in the USB HID protocol dissector, allowing denial of service via packet injection or crafted capture file on Windows. Recommendations For Wireshark versions...

DEBIAN-CVE-2022-2347

There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download...

UBUNTU-CVE-2022-2347

There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download...

USB device subsystem Linux Vulnerable

The vulnerability of the USB device subsystem in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...