ENISA says System Failure is on the Rise

The agency’s latest reports said that system failure comprises more than half of telecom incidents for 2020. Sixty-nine percent of incidents also affected the qualified trust services during the same year...

The vulnerability of the ati_2d_blt() function in the QEMU hardware emulation software allows a hacker to induce a system failure.

The vulnerability of the ati2dblt function in the QEMU hardware emulation software is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the libxml2 library in Mac OS operating systems allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the libxml2 library in Mac OS operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the kvm_io_bus_unregister_dev function (virt/kvm/kvm_main.c) in Linux operating system kernels allows a hacker to cause a service failure.

The vulnerability of the kvmiobusunregisterdev function virt/kvm/kvmmain.c in Linux operating systems is related to a memory leak issue. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the `time/posix-timers.c` component of the Linux operating system’s kernel, which involves integer overflows, allows attackers to cause system failures.

The vulnerability in the time/posix-timers.c component of the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ati_mm_read function in hw/display/ati.c of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of the atimmread function in the hw/display/ati.c file of the QEMU hardware emulation software is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of Intel Graphics Driver drivers relates to the occurrence of operations beyond the buffer boundaries in memory, which allows an attacker to cause a service failure.

The vulnerability of Intel Graphics Drivers’ drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the w5864handle_frame() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the w5864handleframe function located in the drivers/media/pci/tw5864/tw5864-video.c file in the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `net_tx_pkt_add_raw_fragment` function in the `hw/net/net_tx_pkt.c` file of the QEMU hardware emulation software, related to the insufficient use of the `assert()` function, allows a hacker to trigger a system failure.

The vulnerability of the nettxpktaddrawfragment function in the hw/net/nettxpkt.c file of the QEMU hardware emulation software is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the `scalar32_min_max_or` function in the Linux operating system’s kernel/bpf/verifier.c file, which allows a hacker to trigger a service failure

The vulnerability of the scalar32minmaxor function in the Linux kernel’s bpf/verifier.c file is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the Intel Graphics Driver lies in its insufficient validation of input data, which allows attackers to trigger a service failure.

The vulnerability of the Intel Graphics Driver exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

Emerson OpenEnterprise Rights Mismanagement Vulnerability

Emerson Electric OpenEnterprise is a data acquisition and monitoring system SCADA from Emerson Electric, primarily for remote oil and gas applications. A security vulnerability exists in Emerson Electric OpenEnterprise 3.3.4 and prior versions, which arises from the program setting insecure...

The vulnerability of the emulation software for hardware devices on various platforms, QEMU, allows a hacker to trigger a service failure.

The vulnerability of software for emulating hardware on various platforms under QEMU is related to deficiencies in the handling of zero pointer assignments. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the pnv_lpc_do_eccb function in the hardware/ppc/pnv_lpc.c file of the QEMU hardware emulation software allows a hacker to induce a system failure and gain unauthorized access to the PowerNV memory.

The vulnerability of the pnvlpcdoeccb function in the hardware/ppc/pnvlpc.c file of the QEMU hardware emulator is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure and gain unauthorized access to the PowerNV memory...

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor drivers of NVIDIA GeForce, Quadro, and Tesla allows an attacker to disclose protected information or cause system failures.

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor NVIDIA GeForce, Quadro, and Tesla driver involves resolution processing errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...

The vulnerability of the DxgkDdiEscape function in the Display Driver graphics processor drivers of NVIDIA GeForce, Quadro, and Tesla allows a hacker to cause a system failure.

The vulnerability of the DxgkDdiEscape function in the Display Driver Graphics Processor NVIDIA GeForce, Quadro, and Tesla driver exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability of the Intel Graphics Driver subsystem, related to reading beyond the buffer in memory, allows an attacker to cause a service failure.

The vulnerability of the Intel Graphics Driver subsystem is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...