25 matches found
kernel: Linux kernel: Denial of Service due to memory leak in mmc: vub300 module
A flaw was found in the Linux kernel's mmc: vub300 module. An incorrect return value check for mmcaddhost and a missing call to mmcfreehost when usbcontrolmsg fails can lead to memory leaks. A local attacker could exploit this vulnerability, causing the kernel to crash and resulting in a Denial o...
DEBIAN-CVE-2021-47582
In the Linux kernel, the following vulnerability has been resolved: USB: core: Make doproccontrol and doprocbulk killable The USBDEVFSCONTROL and USBDEVFSBULK ioctls invoke usbstartwaiturb, which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large...
Memory corruption
Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...
CVE-2010-0038
CVE-2010-0038 affects Apple iPhone OS 1.0–3.1.2 and iPod touch OS 1.1–3.1.2. The issue is a memory corruption vulnerability triggered by a specific USB control message, allowing a physically proximate attacker to bypass the device lock and read/modify data. The vulnerability is documented as Reco...
CVE-2010-0038: Undefined Security Weakness
Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...