Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips

Piotr Bania of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Intel’s Graphics Accelerator Driver and in an AMD Radeon driver. The Intel driver was released in 2019 and is used in multiple Intel integrated and...

Intel IGC64.DLL Shader Functionality hull shader denial of service vulnerability

Summary An exploitable denial of service vulnerability exists in Intel IGC64.DLL graphics driver. A specially crafted hull shader can cause a NULL pointer dereference. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability could potentially be...

PT-2021-6717 · Arm +2 · Mbed Tls +2

Name of the Vulnerable Software and Affected Versions: Arm Mbed TLS versions prior to 2.23.0 Description: A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator. This issue is related to the implementation of...

Medium: kernel

Issue Overview: A stack buffer overflow issue was found in the getrawsocket routine of the Host kernel accelerator for virtio net vhost-net driver. It could occur while doing an ictolVHOSTNETSETBACKEND call, and retrieving socket name in a kernel stack variable via getrawsocket. A user able to...

DLL hijacking vulnerability in Mint Accelerator of Wuhan Mint Technology Co.

Mint Accelerator is a network acceleration software designed to enhance cross-region game acceleration, web browsing, music appreciation, and video viewing. Wuhan Mint Technology Co. Mint Accelerator suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an...

DLL hijacking vulnerability in Dolphin Online Game Accelerator of Xiamen Xiangyou Network Technology Co.

Dolphin Online Game Accelerator is an online game acceleration software. Dolphin Online Game Accelerator has a DLL hijacking vulnerability, which can be exploited by attackers to inject executable DLL files into client processes to perform arbitrary functions...

DLL Hijacking Vulnerability in Raytheon NN Accelerator of Raytheon (Wuhan) Information Technology Co.

Thor NN Accelerator is an international game acceleration tool. Raytheon Wuhan Information Technology Co. Raytheon NN Accelerator suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functio...

DLL Hijacking Vulnerability in NetEase UU Accelerator of Guangzhou NetEase Computer System Co.

NetEase UU Accelerator is an online game gas pedal product. Guangzhou NetEase Computer Systems Co., Ltd. Netease UU Accelerator DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

Panda Accelerator of Jiangsu Youku Network Technology Co. Ltd. suffers from dll hijacking vulnerability

Panda gas pedal is a powerful online game gas pedal, using a new node intelligent matching algorithm, more stable and reliable transmission channel, optimized for steam and other platforms, effectively solving the problem of high latency and other issues for players. Ltd. Panda gas pedal dll...

Sichuan Xunyou Network Technology Co., Ltd. Xunyou Online Game Accelerator DLL Hijacking Vulnerability

XunYou Online Game Accelerator is a specialized acceleration software for online games. Sichuan Xunyou Network Technology Co., Ltd Xunyou online game gas pedal dll hijacking vulnerability, attackers can use the loophole in the client process to inject executable DLL file, the execution of arbitra...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A memory leak was found in the Red Hat Content Accelerator kernel patch. A local user could use this flaw to cause a denial of service memory exhaustion...

Code Execution Vulnerability in Thor NN Accelerator for Windows

Thor NN Accelerator is an international game acceleration tool. A code execution vulnerability exists in Thor NN Accelerator for Windows, which can be exploited by attackers to execute malicious code...

CVE-2020-10942

A stack buffer overflow issue was found in the getrawsocket routine of the Host kernel accelerator for virtio net vhost-net driver. It could occur while doing an ictolVHOSTNETSETBACKEND call, and retrieving socket name in a kernel stack variable via getrawsocket. A user able to perform ioctl2 cal...

[SECURITY] Fedora 30 Update: varnish-6.3.2-3.fc30

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

[SECURITY] Fedora 31 Update: varnish-6.3.2-3.fc31

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

Accelerator Program for Early-Stage Innovations in Water: An Akamai India CSR Flagship Initiative

Continuing in our commitment to sustainability, Akamai is excited to announce the launch of our accelerator program supporting innovators and building solutions to address India's water challenges. A concerted effort by the Akamai India leadership team, the accelerator program is being launched a...

Security Bulletin: A security vulnerability has been identified in OpenCV shipped with PowerAI

Summary Multiple Vulnerabilities CVE-2019-14493, CVE-2019-14492 and CVE-2019-14491 were found in OpenCV package. Vulnerability Details CVEID: CVE-2019-14493 DESCRIPTION: An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at...

Security Bulletin: A security vulnerability has been identified in lodash shipped with PowerAI.

Summary Vulnerability CVE-2019-10744 found in lodash package. Vulnerability Details CVEID: CVE-2019-10744 DESCRIPTION: Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype...

Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI

Summary Vulnerability CVE-2019-8457 in SqLite package Vulnerability Details CVEID: CVE-2019-8457 DESCRIPTION: SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables. CVSS Base score: 5.3 CVSS Temporal Score:...

The vulnerability of the Cisco Managed Services Accelerator web interface stems from insufficient protection of the WEB pages, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Cisco Managed Services Accelerator web interface is related to insufficient protection of the WEB pages. Exploiting this vulnerability could allow a malicious actor to redirect users to any arbitrary URL address...