2 matches found
LSN-0074-1 Kernel Live Patch Security Notice
Elena Petrova discovered that the pin controller device tree implementation in the Linux kernel did not properly handle string references. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-0427 Andy Nguyen discovered that the Bluetooth A2MP implementation in...
PT-2014-11: Information Disclosure in nginx
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in nginx. URI normalization function does not properly handle the transmitted values, thus an attacker can disclose memory areas using a web server log. How to fix Update your sofware up to the...