3589 matches found
Use-after-free
The kernel is vulnerable to use-after-free. The vulnerability exists in sound/core/timer.c due to erroneous code refactoring which allows an attacker to cause a memory corruption...
kernel: use-after-free in sound/core/timer.c
A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct sndtimerinstance function fails the timer-maxinstances check leading to an invalid address. This could lead to a use-after-free vulnerability...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5755)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5755 advisory. - p54usb: Fix race between disconnect and firmware loading Alan Stern Orabug: 31351863 CVE-2019-15220 - media: rc: prevent memory leak in cx23888irprob...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5750)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5750 advisory. - ALSA: core: Fix card races between register and disconnect Takashi Iwai Orabug: 31351891 CVE-2019-15214 - media: dvb-usb-v2: lmedm04: move ts2020...
CVE-2019-20810
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586...
CVE-2020-11041
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
Eavesdropping on Sound Using Variations in Light Bulbs
New research is able to recover sound waves in a room by observing minute changes in the room's light bulbs. This technique works from a distance, even from a building across the street through a window. Details: In an experiment using three different telescopes with different lens diameters from...
CVE-2020-0218
In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
The vulnerability of the FreeRDP remote desktop protocol, caused by indexing errors, allows a hacker to trigger a service failure or a client-side malfunction, resulting in the absence or distortion of sound.
The vulnerability of the FreeRDP remote desktop protocol is caused by indexing errors. Exploiting this vulnerability allows a malicious actor to cause service failures or malfunctions in the client-side component, resulting in the absence or distortion of audio signals...
CVE-2019-20810
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586...
DEBIAN-CVE-2020-11041
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
CVE-2020-11041
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
Design/Logic Flaw
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
UBUNTU-CVE-2020-11041
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
CVE-2020-11041 Improper Validation of Array Index in FreeRDP
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
CVE-2020-11041
CVE-2020-11041 affects FreeRDP up to and including 2.0.0, where an outside controlled array index is used unchecked for sound backend configuration (alsa, oss, pulse, etc.). This can cause a client crash and may lead to a session disconnect or distorted sound. A fix is available in 2.1.0; if upgr...
CVE-2020-11041
In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...
soundbarrierfence.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164241 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
kernel security and bug fix update
4.18.0-193.1.22.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.1.22 - net netlabel: cope with NULL catmap Paolo Abeni 1827249...