SUSE CVE-2017-17566

An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service host OS crash or gain host OS privileges in shadow mode by mapping a certain auxiliary page...

GSD-2023-1002193 drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer

drm/msm/dp: do not complete dpauxcmdfifotx if irq is not for aux transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

PT-2023-35091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the interrupt is not for an auxiliary transfer. This could potentially lead to security...

PT-2023-34799 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the interrupt is not for an auxiliary transfer. This could potentially lead to security...

PT-2023-9446 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the dp aux cmd fifo tx function in the Linux kernel's DP component. It is caused by synchronization errors when using a shared resource, which can lead ...

PT-2025-49742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/msm/dp subsystem related to the handling of auxiliary devices connected to the DisplayPort DP controller. Specifically, the issue arises from...

Hewlett Packard Enterprise Nimble Storage systems 安全漏洞

Hewlett Packard Enterprise Nimble Storage systems is a predictive flash storage technology from Hewlett Packard Enterprise that ensures that applications continue to run throughout hybrid cloud environments. A security vulnerability exists in Hewlett Packard Enterprise Nimble Storage systems, whi...

Metasploit Weekly Wrap-Up

The past, present and future of Metasploit Don't miss Spencer McIntyre's talk on the Help Net Security's blog. Spencer is the Lead Security Researcher at Rapid7 and speaks about how Metasploit has evolved since its creation back in 2003. He also explains how the Framework is addressing today's...

SQLite 输入验证错误漏洞

SQLite is a lightweight database, a relational database management system that adheres to ACID. security vulnerabilities exist in versions prior to SQLite 3.39.2, which originate from the auxiliary C API. no details of the vulnerabilities are currently available...

The vulnerability of Apple M1 chip architecture allows a hacker to gain access to the OS’s kernel and gain full control over the vulnerable device.

The vulnerability of Apple M1 chip architecture is related to the disclosure of information through auxiliary channels. Exploiting this vulnerability can allow a hacker to gain access to the OS’s kernel and gain full control over the vulnerable device...

Metasploit Weekly Wrap-Up

SAMR Auxiliary Module A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral movement...

GHSA-28P5-7RG4-8V99 Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers allows a attacker to disclose protected information by executing attacks through auxiliary channels.

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers is related to data encryption errors. Exploiting this vulnerability can allow attackers to disclose sensitive information by launching attacks through secondary channel...

GSD-2022-1001262 ASoC: codecs: rx-macro: fix accessing compander for aux

ASoC: codecs: rx-macro: fix accessing compander for aux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

Metasploit Weekly Wrap-Up

Capture Plugin Capturing credentials is a critical and early phase in the playbook of many offensive security testers. Metasploit has facilitated this for years with protocol-specific modules all under the auxiliary/server/capture. Users can start and configure each of these modules individually,...

Bitdefender Total Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Confluent Ansible 安全漏洞

Confluent Ansible is a product from the US-based Confluent, Inc. It provides an easy way to deploy, manage and configure Confluent Platform services. A security vulnerability exists in Confluent Ansible cp-ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0, in which its auxiliary components are...

The vulnerability of the X509_aux_print() function in the OpenSSL library, which allows a hacker to disclose protected information or cause a service failure

The vulnerability of the X509auxprint function in the OpenSSL library is related to reading data beyond the buffer boundaries in memory during the processing of ASN.1 strings. Exploitation of this vulnerability can allow a malicious actor to disclose sensitive information or cause service failure...

GSD-2021-1001174 driver core: auxiliary bus: Fix memory leak when driver_register() fail

driver core: auxiliary bus: Fix memory leak when driverregister fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

UVI-2021-1001174 driver core: auxiliary bus: Fix memory leak when driver_register() fail

driver core: auxiliary bus: Fix memory leak when driverregister fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...