8628 matches found
Unspecified Vulnerability in Trusted Firmware M
ARM Trusted Firmware M TFM is an open source software from ARM UK. Provides a set of highly configurable software components to create a trusted execution environment. A security vulnerability exists in Trusted Firmware OP-TEE Trusted OS prior to version 3.15.0, which stems from the lack of secur...
SUSE: Security Advisory (SUSE-SU-2021:3941-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OSV-2020-2320 UNKNOWN WRITE in cpu_arm_exec_arm
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20220 Crash type: UNKNOWN WRITE Crash state: cpuarmexecarm tcgexecallarm qemutcgcpuloop...
The vulnerability of the implementation of the NSPE mode for software that creates a trusted execution environment (TEE) in ARM Trusted Firmware-M (TF-M) allows a attacker to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the implementation of the NSPE mode for software that creates a trusted execution environment TEE in ARM Trusted Firmware-M TF-M is related to data writing outside of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or gain unauthoriz...
Oracle Linux 8 : kvm_utils (ELSA-2021-9568)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9568 advisory. - In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CVE-2020-15469 - A flaw was foun...
grant table v2 status pages may remain accessible after de-allocation (take two)
ISSUE DESCRIPTION Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched back from v2 to v1. The freeing of such...
CVE-2021-43997
FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...
arm-v.com Improper Access Control vulnerability OBB-2275379
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2021-23999 · Freertos · Freertos
Name of the Vulnerable Software and Affected Versions: FreeRTOS versions 10.2.0 through 10.4.5 FreeRTOS versions through 10.4.6 Description: The issue affects FreeRTOS on ARMv7-M and ARMv8-M MPU platforms, where non-kernel code can call internal functions to raise privilege. This can lead to...
gcc security and bug fix update
8.5.0-3.0.2 - Fix Orabug 33451471 and backport CTF/BTF enhancements ctfc: Free CTF container elements in ctfcdeletecontainer ctf: Do not warn for CTF not supported for GNU GIMPLE ICE in btffinalize when compiling with -gbtf PR debug/102507, Orabug 33451471 Reviewed-by: Jose E. Marchesi 8.5.0-3.0....
arm-v.ru Improper Access Control vulnerability OBB-2260595
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
AMD Secure Processor 输入验证错误漏洞
AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from AMD. An input validation error vulnerability exists in multiple AMD products that stems from incorrect input and range checking in the Platform Secure Processor PSP bootloader image header that could allow an attacker to use...
PT-2021-1522 · Arm +8 · Arm Cortex +9
Name of the Vulnerable Software and Affected Versions: Arm Cortex and Neoverse processors versions prior to 2022-03-08 Description: The issue is related to a hardware flaw that allows for cache speculation, also known as Spectre-BHB. An attacker can leverage the shared branch history in the Branc...
PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact
PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs credentials used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the network Crawls shared drives in th...
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
Arm Mali Graphics Processing Unit GPU kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes...
Arm Trusted Firmware Out-of-Bounds Write Vulnerability
Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure NS world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment NSPE handler mode. This vulnerability affects...
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
Arm Mali Graphics Processing Unit GPU kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information...
CVE-2021-35227
The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available...
