Lucene search
+L

1513 matches found

OSV
OSV
added 2021/03/20 10:15 p.m.9 views

AZL-6525 CVE-2020-27170 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

4.7CVSS6.9AI score0.00565EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/20 10:15 p.m.11 views

CVE-2020-27170

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

4.7CVSS8.5AI score0.00565EPSS
SaveExploits0References13
Debian CVE
Debian CVE
added 2021/03/20 9:41 p.m.54 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS6.1AI score0.00577EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/03/20 9:30 p.m.25 views

CVE-2020-27170

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

6.2AI score0.00565EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2021/03/20 9:30 p.m.46 views

CVE-2020-27170

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

4.7CVSS6.1AI score0.00565EPSS
SaveExploits0
Fedora
Fedora
added 2021/03/20 12:21 a.m.40 views

[SECURITY] Fedora 34 Update: gnome-calculator-40~rc-1.fc34

gnome-calculator is a powerful graphical calculator with financial, logical and scientific modes. It uses a multiple precision package to do its arithmetic to give a high degree of accuracy...

5.5CVSS2.8AI score0.00639EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2021/03/18 10:0 p.m.65 views

CVE-2020-27170

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

4.7CVSS7AI score0.00565EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.7 views

The vulnerability of Linux operating system kernels, related to pointer arithmetic errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

7CVSS6.4AI score0.0122EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.15 views

The vulnerability of the Go programming language, related to incorrect calculations, allows attackers to disclose protected information and compromise the integrity of that information.

The vulnerability in the crypto/elliptic/p224.go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to disclose protected information and compromise the integrity of that information...

6.5CVSS6.5AI score0.02689EPSS
SaveExploits0References9Affected Software6
NVD
NVD
added 2021/02/22 7:15 a.m.36 views

CVE-2020-11296

Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

7.5CVSS0.00595EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/22 7:15 a.m.30 views

Buffer overflow

Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

5CVSS7.8AI score0.00595EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/02/22 6:26 a.m.45 views

CVE-2020-11296

Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

7.8AI score0.00595EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/22 6:26 a.m.106 views

CVE-2020-11296

CVE-2020-11296 concerns an arithmetic overflow in processing NOA IE across multiple Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, etc.). Root cause is improper error handling, leading to an overflow that can impact Snapdragon families including Mobile, IoT, Automotive lines and rela...

7.5CVSS7.7AI score0.00595EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/02/22 12:0 a.m.10 views

PT-2021-9304 · Qualcomm · Snapdragon Compute +9

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon...

7.5CVSS7.7AI score0.00595EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/02/04 6:9 a.m.31 views

CVE-2020-13579

An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser perform arithmetic that may overflow which can result in an undersized heap allocation...

8.8CVSS8AI score0.72559EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.8 views

The vulnerability of SELinux’s access control system in the Linux operating system allows a perpetrator to trigger a service failure.

The vulnerability of SELinux’ access control system in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.1CVSS6.5AI score0.03097EPSS
SaveExploits0References37Affected Software8
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.11 views

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are often fabricated on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from...

7.5CVSS7.2AI score0.00595EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.10 views

The vulnerability of the jp2_decode function (libjasper/jp2/jp2_dec.c) in the JasPer library allows a hacker to induce a service failure.

The vulnerability of the jp2decode function libjasper/jp2/jp2dec.c in the JasPer library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.1CVSS6.9AI score0.01946EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.13 views

The vulnerability of the Linux operating system’s kernel, related to a pointer dereferencing error, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS6.4AI score0.00426EPSS
SaveExploits1References15Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.8 views

The vulnerability of the w5864handle_frame() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the w5864handleframe function located in the drivers/media/pci/tw5864/tw5864-video.c file in the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

4.4CVSS6.5AI score0.00384EPSS
SaveExploits0References17Affected Software3
Rows per page
Query Builder