8774 matches found
Cisco IOS XE Arbitrary Code Execution Vulnerability
Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An arbitrary code execution vulnerability exists in the file system of Cisco IOS XE. The vulnerability stems from insufficient file location validation. An attacker could exploit this vulnerability by placing...
[SECURITY] Fedora 30 Update: ibus-1.5.20-5.fc30
IBus means Intelligent Input Bus. It is an input framework for Linux OS...
CVE-2019-14238
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...
Code injection
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...
CVE-2019-14238
On STMicroelectronics STM32F7 devices, the Proprietary Code Read Out Protection (PCROP) can be defeated by a debug probe through the ITCM bus, exposing the software IP protection mechanism. Affected component: PCROP in STM32F7. Root cause: PCROP can be bypassed via a debug interface to the ITCM p...
CVE-2019-14238
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...
EulerOS 2.0 SP3 : gvfs (EulerOS-SA-2019-2039)
According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket witho...
Important: Red Hat Security Advisory: dbus security update
An update for dbus is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
USN-4134-2: IBus regression
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...
Important: Red Hat Security Advisory: dbus security update
An update for dbus is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
PT-2019-4413 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: The issue is related to a memory leak in the ath10k usb hif tx sg function, which can be triggered by usb submit urb failures, leading to a denial of service due to memory consumption. This ca...
The vulnerability of the `bus_open_system_watch_bind_with_description` function in `shared/bus-util.c` in the Systemd daemon allows a malicious actor to elevate their privileges and alter DNS settings.
The vulnerability of the busopensystemwatchbindwithdescription function in the shared/bus-util.c file is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges and alter DNS settings...
[SECURITY] Fedora 31 Update: ibus-1.5.21-2.fc31
IBus means Intelligent Input Bus. It is an input framework for Linux OS...
ibus defect vulnerability
ibus is an input framework for Linux/Unix platforms. A security vulnerability exists in ibus, which stems from a failure to configure the Dbus server settings correctly. A local attacker could use this vulnerability to intercept all keystrokes of an affected user, modify the input method engine, ...
Ubuntu 16.04 LTS / 18.04 LTS : IBus vulnerability (USN-4134-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4134-1 advisory. Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers t...
Ubuntu: Security Advisory (USN-4134-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4134-1: IBus vulnerability
Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user...
EulerOS 2.0 SP5 : gvfs (EulerOS-SA-2019-1907)
According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket witho...
UBUNTU-CVE-2019-14822
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...
kernel: brcmfmac frame validation bypass
If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and not be processed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be...