jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider

A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy...

GHSA-RF6R-2C4Q-2VWG jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy...

Fedora: Security Advisory for oddjob (FEDORA-2020-238bbf85d8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the USB driver for the Xirlink camera (drivers/media/usb/gspca/xirlink_cit.c) in the Linux kernel allows a hacker to compromise the integrity of protected information and cause service failures.

The vulnerability of the USB driver for the Xirlink camera driver/media/usb/gspca/xirlinkcit.c in the Linux kernel is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information and cause system failures...

[SECURITY] Fedora 32 Update: oddjob-0.34.6-1.fc32

oddjob is a D-Bus service which performs particular tasks for clients which connect to it and issue requests using the system-wide message bus...

The vulnerability of the Linux systemd initialization process, related to the access to memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux systemd initialization process is related to an error in the handling of the queue after it is freed from memory. Asynchronous Polkit requests are executed when processing dbus messages. Exploiting this vulnerability allows an attacker to gain access to confidential...

The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, allows a intruder to gain unauthorized access to information and compromise its integrity.

The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, is related to the lack of authentication when the DBus server is configured incorrectly. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to...

kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...

kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free

A use-after-free flaw was found in the Linux kernel’s input device driver functionality when unplugging a device. A user with physical access could use this flaw to crash the system...

Zephyr USB Mass Storage Buffer Overflow Vulnerability

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation in the U.S. USB Mass Storage is one of the USB mass storage components. A buffer overflow vulnerability exists in USB Mass Storage in Zephyr versions 1.14.1 and later and 2.1.0 and later. An attacker...

CVE-2020-10019

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

oddjob path traversal vulnerability

oddjob is a software package for D-Bus with public gateway interface functionality. A path traversal vulnerability exists in the mkhomedir tool in versions of oddjob prior to 0.34.5 and prior to 0.34.6, which stems from the fact that during the creation of a home directory, mkhomedir copies the...

Linux kernel resource management error vulnerability (CNVD-2020-27234)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the usbsgcancel file in drivers/usb/core/message.c in versions of Linux kernel prior to 5.6.8. The vulnerability...

ibus: missing authorization allows local attacker to access the input bus of another user

A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface...

Moderate: Red Hat Security Advisory: systemd security, bug fix, and enhancement update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...

kernel: Null pointer dereference in the sound/usb/line6/driver.c

A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system...

kernel: Null pointer dereference in the sound/usb/line6/pcm.c

A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system...

kernel: Null pointer dereference in the sound/usb/line6/driver.c

A NULL pointer dereference flaw was found in the way the Line 6 POD USB driver in the Linux kernel handled disconnection. This flaw allows an attacker with physical access to the system to crash the system...