CVE-2023-52494

A flaw was found in the Linux Kernel. 128 bit struct mhiringelement aligned event ring elements are expected, but an unaligned read pointer can be passed. An unaligned read pointer could lead to multiple issues, including a denial of service or ring buffer memory corruption...

CVE-2023-52493

A flaw was found in the Linux Kernel. Read and write locks for the channel are taken in succession by dropping the read lock from parsexferevent, such that a callback given to client can potentially queue buffers and acquire the write lock in that process. This can result in multiple locks and a...

Microsoft Windows USB Print Driver 安全漏洞

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability that is due to a flaw in the kernel. An attacker could exploit this vulnerability to gain SYSTEM privileges...

Huawei EulerOS: Security Advisory for subscription-manager (EulerOS-SA-2024-1302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HPESBHF04608 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Using Certain Intel Processors, INTEL-SA-00972, 2024.1 IPU - Intel Processor Bus Lock Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 CVSS Scores: | C...

PT-2024-2119 · Microsoft · Windows Usb Hub Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Hub Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows USB Hub driver, which can be exploited to execute arbitrary code. This could allow an attacker to gain...

UBUNTU-CVE-2023-39368

Protection mechanism failure of bus lock regulator for some IntelR Processors may allow an unauthenticated user to potentially enable denial of service via network access...

EulerOS 2.0 SP8 : subscription-manager (EulerOS-SA-2024-1302)

According to the versions of the subscription-manager packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bu...

2024.1 IPU - Intel® Processor Bus Lock Advisory

Summary: A potential security vulnerability in the bus lock regulator mechanism for some Intel® Processors may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39368 Description: Protection mechanism...

DEBIAN-CVE-2023-52494

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "isvalidringptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned...

CVE-2023-52493

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parsexferevent such that a callback given to client can potentially queu...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "isvalidringptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parsexferevent such that a callback given to client can potentially queu...

CVE-2023-52488

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent $00, followed by all the FIFO data without having to...

UBUNTU-CVE-2023-52493

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parsexferevent such that a callback given to client can potentially queu...

CVE-2023-52494

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "isvalidringptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned...

UBUNTU-CVE-2023-52494

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "isvalidringptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned...

The vulnerabilities of functions map_usb_set_vbus() and omap_usb_start_srp() in the driver drivers/phy/ti/phy-omap-usb2.c of the USB device drivers for TI (Texas Instruments) operating system in Linux, which allow a hacker to cause a service failure.

The vulnerabilities of functions mapusbsetvbus and omapusbstartsrp in the driver drivers/phy/ti/phy-omap-usb2.c of the TI USB device driver for the Linux operating system are related to the assignment of a null pointer. Exploiting these vulnerabilities could allow a remote attacker to cause a...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to multiple vulnerabilities in IBM Java SDK

Summary There are multiple vulnerabilities in IBM Java SDK, Java Technology Edition used by IBM App Connect Enterprise and IBM Integration Bus. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified...

chiba-bus-kyokai.or.jp Cross Site Scripting vulnerability OBB-3865585

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...