Honeywell Alerton 安全漏洞

Honeywell Alerton is a solution from Honeywell USA. A security vulnerability exists in Honeywell Alerton BCM-WEB version 3.3.X. The vulnerability can be exploited by an attacker to capture an authentication hash and use it to create a new session. An attacker could exploit the vulnerability to...

PT-2023-23789 · Alerton · Alerton Acm

Name of the Vulnerable Software and Affected Versions: BCM-WEB version 3.3.X Description: An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salted MD5 hash, which could result in a successful brute force password attack. Recommendation...

SUSE CVE-2011-1598

The bcmrelease function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted release operation...

SUSE CVE-2021-3609

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root...

SUSE CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

GSD-2022-1006271 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006176 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006052 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005902 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005712 clk: bcm: rpi: Prevent out-of-bounds access

clk: bcm: rpi: Prevent out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005657 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34529 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.10 through v4.14.290 Description: The issue is related to a refcount leak in the bcm kona smc init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2022-34160 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.10 through v5.10.136 Description: A refcount leak was discovered in the bcm kona smc init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.10...

PT-2022-33915 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.10 through v5.15.60 Description: The issue is related to a refcount leak in the bcm kona smc init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

GSD-2022-1005398 clk: bcm: rpi: Prevent out-of-bounds access

clk: bcm: rpi: Prevent out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005335 ARM: bcm: Fix refcount leak in bcm_kona_smc_init

ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1004970 clk: bcm: rpi: Prevent out-of-bounds access

clk: bcm: rpi: Prevent out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

flypush.research.bcm.edu Cross Site Scripting vulnerability OBB-2880908

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1004822 soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe

soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstbpmprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.250 by commit...

GSD-2022-1004244 soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe

soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstbpmprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...