7891 matches found
DEBIAN-CVE-2020-27661
A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...
kernel: malicious USB devices can lead to multiple out-of-bounds write
An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address...
PT-2024-11329
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been resolved in the Linux kernel. The issue occurred in the probe function when the final serial config fails, causing the info variable to leak. A resource handling...
NPort IA5150A/IA5250A/IA5450A Telnet Information Disclosure
The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information through Telnet connections...
NPort IA5150A/IA5250A IA5450A Privilege Escalation
The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain increased privileges...
NPort IA5150A/IA5250A IA5450A Access Control
The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
PT-2021-9138 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr versions = v1.14.2, = v2.2.0 Description: The issue concerns Missing Size Checks in Bluetooth HCI over SPI, which involves Improper Handling of Length Parameter Inconsistency. Recommendations: For Zephyr versions = v1.14.2, = v2.2.0, a...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference in drivers/tty/serial/8250/8250core.c:serial8250isainitports allows local users to cause a denial of service by using the p-serialin pointer which is uninitialized...
May 20, 2021—KB5003212 (OS Build 18363.1593) Preview
None None...
May 20, 2021—KB5003217 (OS Build 17763.1971) Preview
None None...
kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver
A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of...
kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c
A NULL pointer dereference flaw was found in the Linux kernel’s UART 8250 functionality, in the way certain hardware architectures handled situations where default ports 0x2E8, 0x2F8, 0x3E8, 0x3F8 are not available. This flaw allows a local user to crash the system. The highest threat from this...
kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver
A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of...
kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c
A NULL pointer dereference flaw was found in the Linux kernel’s UART 8250 functionality, in the way certain hardware architectures handled situations where default ports 0x2E8, 0x2F8, 0x3E8, 0x3F8 are not available. This flaw allows a local user to crash the system. The highest threat from this...
openSUSE Security Update : monitoring-plugins-smart (openSUSE-2021-706)
This update for monitoring-plugins-smart fixes the following issues : monitoring-plugins-smart was updated to 6.9.1 : This is a security-release boo1183057 + Fixes the regular expression for pseudo-devices under the /dev/bus/N path. from 6.9.0 + Allows using PCI device paths as device names 64 +...
CVE-2020-27185
Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service...
Authentication flaw
Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service...
PT-2024-11093 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the usb: dwc3: gadget. The issue arises when the gadget structure is freed before freeing the endpoints, resulting in a...
MOXA NPort IA5150A: Access Control Vulnerability
MOXA Moxa NPort IA5150A Series is an industrial control device server from China Moxa MOXA. for 1-port RS-232 / 422/485 industrial automation device server with serial/LAN/power surge protection, two 10/100BaseTX ports with single IP, and operating temperature from 0 to 60°C. The NPort IA5150A...
PT-2021-6028
Name of the Vulnerable Software and Affected Versions IDEMIA Morpho Wave Compact and VisionPass devices versions prior to 2.6.2 Description The issue is related to a buffer overflow in Thrift command handlers, which can be exploited by physically proximate authenticated attackers to achieve code...