PT-2024-11200 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference leak issue has been identified in the Linux kernel, specifically in the interconnect: qcom: bcm-voter component. The problem arises from a missing of node put call in the o...

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

Input validation

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

Code injection

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 are affected by CVE-2020-29440, where the system does not perform certificate validation when pairing a new key fob with the Body Control Module (BCM). This allows an attacker who is inside the vehicle or can send data over the CAN bus to start and drive t...

Important: kernel

Issue Overview: The Serial Attached SCSI SAS implementation in the Linux kernel mishandles a mutex within libsas. This allows local users to cause a denial of service deadlock by triggering certain error-handling code. CVE-2017-18232 The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c i...

Information Disclosure

kernel is vulnerable to information disclosure. An information leak in bcmconnect in the Controller Area Network CAN Broadcast Manager implementation could allow a local, unprivileged user to leak kernel mode addresses in /proc/net/can-bcm...

BCM Messenger: Account Takeover with old password and login QR

BCM servers don't store users' passwords, and the private keys are stored locally. If you change the password, the data in the old QR code will not be revoked. Please read the warnings during registration and backup, and protect your account credentials. Thank you! When someone wants to log into...

CVE-2018-10624

In Johnson Controls Metasys System Versions 8.0 and prior and BCPro BCM all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information...

UbiQuoss Switch VP5208A Unauthorized Operation Vulnerability

UbiQuoss Switch VP5208A is a switch product from UbiQuoss Korea. A security vulnerability exists in the UbiQuoss Switch VP5208A, which originates from a user login failure where the program creates a bcmpassword file with user credentials in plaintext in /cgi-bin/. An attacker can obtain the...

CVE-2018-8043

CVE-2018-8043 : The Linux kernel’s unimac_mdio_probe (drivers/net/phy/mdio-bcm-unimac.c) fails to validate certain resource states, enabling a local attacker to trigger a NULL pointer dereference and cause a denial of service. The issue affects kernel versions up to 4.15.8. Connected advisories (...

Broadcom Wi-Fi SoC - Heap Overflow wlc_tdls_cal_mic_chk Due to Large RSN IE in TDLS Setup Confirm Frame

Broadcom Wi-Fi SoC - Heap Overflow wlctdlscalmicchk Due to Large RSN IE in TDLS Setup Confirm Frame Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1047 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in bot...

Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow

Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1046 https://googleprojectzero.blogspot.ca/2017/04/over-air-exploiting-broadcoms-wi-fi4.html Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and...

Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1046 https://googleprojectzero.blogspot.ca/2017/04/over-air-exploiting-broadcoms-wi-fi4.html Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile...

CVE-2014-7395

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7395

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7395

CVE-2014-7395 affects the USF BCM (com.appmakr.app193115) Android app, where the SSL/TLS certificate chain is not validated by the client. This allows an attacker performing a man-in-the-middle attack to spoof servers and obtain sensitive information via a crafted certificate. The available docum...