1175 matches found
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4427-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4427-1 advisory. It was discovered that the Kvaser CAN/USB driver in the Linux kernel did not properly initialize memory in certain situations. A local attacker could...
CVE-2020-15393
In the Linux kernel 4.4 through 5.7.6, usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770...
CVE-2020-8322
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...
CVE-2020-8322
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...
CVE-2020-8322
CVE-2020-8322 affects Lenovo Notebook and ThinkStation systems, where a vulnerability in the SMI callback function used by the Legacy USB driver could allow arbitrary code execution. The issue is tied to the Legacy USB driver’s SMI handling, with potential impact described as arbitrary code execu...
CVE-2020-8322
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...
CVE-2020-8322: Undefined Security Weakness
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...
PT-2020-20089
Name of the Vulnerable Software and Affected Versions Lenovo Notebook and ThinkStation models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution. Recommendations At the moment, there is no...
CVE-2020-13143
gadgetdevdescUDCstore in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4...
CVE-2020-11608
A flaw was found in the way the ov519 driver in the Linux kernel handled certain types of USB descriptors. This flaw allows an attacker with the ability to induce the error conditions to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the affected code from...
CVE-2020-12464
usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...
CVE-2020-12464
usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash...
kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver
An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...
kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver
An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...
CVE-2020-11668
A NULL pointer dereference flaw was found in the Xirlink camera USB driver 'xirlink-cit' in the Linux kernel. The driver mishandles invalid descriptors leading to a denial-of-service DoS. This could allow a local attacker with user privilege to crash the system or leak kernel internal information...
Binary files in some USB drivers are not updated after you install Windows 7 SP1 or Windows Server 2008 R2 SP1
Binary files in some USB drivers are not updated after you install Windows 7 SP1 or Windows Server 2008 R2 SP1 If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site. Symptoms After you install Windows 7 Service Pack 1 S...
Linux kernel input validation error vulnerability (CNVD-2020-22986)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.6.1, which stems from a failure of the drivers/media/usb/gspca/xirlinkcit.c file to properly handle...