Intel® QAT Driver Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers may allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-218...

K11270891: Multiple Intel Linux Wi-Fi Drivers vulnerabilities CVE-2020-12313, CVE-2020-12317, CVE-2020-12319, CVE-2017-13080

Security Advisory Description CVE-2020-12313 Insufficient control flow management in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-12317 Improper buffer restriction in...

K86162657: Intel Linux Bluetooth Drivers vulnerabilities CVE-2020-12321, CVE-2020-12322

Security Advisory Description CVE-2020-12321 Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-12322 Improper input validation in some IntelR...

SUSE CVE-2020-12321

Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

SUSE CVE-2020-12317

Improper buffer restriction in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-41342

Improper buffer restrictions in the IntelR C++ Compiler Classic before version 2021.7.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41342

Improper buffer restrictions in the IntelR C++ Compiler Classic before version 2021.7.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2022-2826)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2022-2851)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

hw: Intel: Improper restriction in memory buffer in graphics drivers cause escalation of privilege

A flaw has been identified in the Linux kernel i915 graphics driver that improperly restricts operations within the bounds of a memory buffer. This issue could allow a local user to crash the system or potentially escalate their privileges on the system...

Intel NUC 缓冲区错误漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR NUC M15 Laptop Kits BCTGL357.0074, which stems from the BIOS firmware improperly restricting buffers. An attacker could exploit the vulnerability to escalate privileges...

Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in previous versions of Intel XMM 7560 Modem software M27560R01.2146.00, which stems from an improper buffer restriction that could allow a privileged user to...

CVE-2022-27625

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

CVE-2022-37302

CVE-2022-37302 affects Schneider Electric EcoStruxure Control Expert (formerly Unity Pro) and is described as CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer. The vulnerability can cause the Control Expert software to crash when opening an incorrect project file, ...

CVE-2022-28858

Improper buffer restriction in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-28858

Improper buffer restriction in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21160

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-28858

CVE-2022-28858 affects Intel NUC Laptop Kits with firmware prior to BC0076, where an improper buffer restriction could allow a privileged user to escalate privileges via local access. The Intel advisory INTEL-SA-00712 confirms the issue and provides mitigations through firmware BIOS updates to af...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC 9 Extreme Laptop Kit, which stems from improper buffer restriction. An attacker exploited the vulnerability to elevate privileges...

Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...