7535 matches found
UBUNTU-CVE-2024-26934
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface Among the attribute file callback routines in drivers/usb/core/sysfs.c, the interfaceauthorizedstore function is the only one which acquires a device lock on an ancestor device: ...
UBUNTU-CVE-2024-26996
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm function is working and then stop usb0 interface for link down, ethstop is called. At this piont, accidentally if usb transport error should...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2024-1086 Universal local privilege escalation Proof-of-C...
kernel: usb-storage: alauda: Fix uninit-value in alauda_check_media()
An uninitialized value vulnerability was found in the alauda USB storage driver in the Linux kernel. In alaudacheckmedia, the function does not verify that USB transfer operations succeeded before using the received data. If a transfer fails, uninitialized memory may be accessed, leading to...
kernel: Linux kernel ALSA USB audio: Denial of Service due to memory leaks in MIDI 2.0 / UMP device handling
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA USB audio driver. This vulnerability, related to improper memory management when handling MIDI 2.0 / Universal MIDI Packet UMP devices, could lead to memory leaks. A local attacker with low privileges could exploit this...
kernel: usb: out-of-bounds read in read_descriptors
An out-of-bounds read issue was found in the USB subsystem in the Linux kernel. This flaw allows a malicious user to crash the system, resulting in a denial of service condition...
kernel: HID: sony: Fix a potential memory leak in sony_probe()
In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sonyprobe If an error occurs after a successful usballocurb call, usbfreeurb should be called...
Improper Certificate Validation
osxcollector is vulnerable to Improper Certificate Validation. The vulnerability is due to incomplete inspection of Universal/fat binaries, which allows malicious code to appear as if it is signed by Apple, leading to the execution of unsigned code...
PT-2024-28088
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition vulnerability has been resolved in the Linux kernel, specifically in the usb: gadget: u audio component. The issue occurred due to the use of controls after free during...
CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability
The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 5.0.17 LTS and 11.5.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...
The vulnerability of the USB Print Driver driver for Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the USB Print Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2024-24214 · Terratec · Terratec Dmx 6Fire Usb
Name of the Vulnerable Software and Affected Versions: Terratec DMX 6Fire USB version 1.23.0.02 Description: An unquoted service path vulnerability allows a local attacker to escalate privileges via the Program.exe component. Recommendations: For Terratec DMX 6Fire USB version 1.23.0.02, consider...
Tillitis TKey Signer 安全漏洞
Tillitis TKey Signer is an open source ed25519 signature tool from Tillitis AB. A security vulnerability exists in Tillitis TKey Signer, which originates from the ability to disclose part of the TKey data in RAM via the USB interface...
SUSE CVE-2021-47210
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARNON in tps6598xblockread Calling tps6598xblockread with a higher than allowed len can be handled by just returning an error. There's no need to crash systems with panic-on-warn enabled...
The vulnerability of the USB HID analyzer used by Wireshark, which is used to analyze computer network traffic, allows a hacker to perform a service denial.
The vulnerability of the USB HID analyzer used by Wireshark for analyzing computer network traffic is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Silex Technology DS-600 安全漏洞
The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...
Toolkit - The Essential Toolkit For Reversing, Malware Analysis, And Cracking
This tool compilation is carefully crafted with the purpose of being useful both for the beginners and veterans from the malware analysis world. It has also proven useful for people trying their luck at the cracking underworld. It's the ideal complement to be used with the manuals from the site,...
