Input validation

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution...

CVE-2023-20568

CVE-2023-20568 involves improper signature verification in the Radeon RX Vega M Graphics driver for Windows, allowing an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature and potentially achieve arbitrary code execution. The issue affects Radeon RX...

CVE-2023-20567

The CVE-2023-20567 entry concerns the Radeon RX Vega M Graphics driver for Windows, with the root cause being improper signature verification in AMDSoftwareInstaller.exe. This vulnerability could allow an attacker with admin privileges to execute arbitrary code by launching the signed-update tool...

AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges t...

PT-2023-7413 · Amd · Radeon Rx Vega M Graphics Driver

Name of the Vulnerable Software and Affected Versions: RadeonTM RX Vega M Graphics driver for Windows affected versions not specified Description: The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This could allow an attacker with admin...

AMD Graphics Driver Vulnerabilities – November 2023

Bulletin ID: AMD-SB-6003 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD received reports of vulnerabilities potentially affecting some AMD Graphics products. Refer to the CVE Details section for information about each CVE. CVE...

Rocky Linux 8 : grafana (RLSA-2021:1859)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1859 advisory. - Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. CVE-2020-24303 - A signature verification vulnerability...

Rocky Linux 8 : dnf (RLSA-2021:4464)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4464 advisory. - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can...

SUSE CVE-2020-27846

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2023-46139

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic...

Design/Logic Flaw

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic...

CVE-2023-46139

KernelSU (Android) prior to 0.7.0 is affected. The root cause is a mismatch in signature verification logic: the vulnerable path reads the last signing block with id 0x7109871a, while Android installation validates the first block, allowing a malware-signed block to bypass verification and escala...

CVE-2023-46139 KernelSU signature validation mismatch

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic...

PT-2023-29871 · Kernelsu · Kernelsu

Name of the Vulnerable Software and Affected Versions: KernelSU versions 0.6.1 through 0.6.x Description: The issue arises from a flaw in the signature verification logic of KernelSU, allowing malware with specially constructed app signing blocks to gain root privileges on infected devices. This...

CVE-2023-28804

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105...

PT-2023-21972 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Linux versions prior to 1.3.1.6 Description: The issue is related to an Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux, which allows Code Injection...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Tor vulnerabilities (USN-5036-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5036-1 advisory. It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to cause a denia...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, as well as the Acronis Cyber Protect 15 data protection software, stems from errors in verifying the cryptographic signature. This allows attackers to exploit this vulnerability to gain increased privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, as well as Acronis CyberProtect 15 data protection software, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to increase their...

CVE-2023-41325 OP-TEE double free in shdr_verify_signature

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...

Ubuntu: Security Advisory (USN-6365-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...