USN-4846-1: Yubico PIV Tool vulnerabilities

It was discovered that libykpiv, a supporting library of the Yubico PIV tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...

Design/Logic Flaw

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

CVE-2020-5795

UNIX Symbolic Link Symlink Following in TP-Link Archer A7USV5200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router...

Buffer overflow

Buffer overflow in the auerswaldprobe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system...

CVE-2019-12672

A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the underlying operating system OS with root privileges. The vulnerability is due to insufficient file location validatio...

CVE-2019-15504

drivers/net/wireless/rsi/rsi91xusb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic which may be remote via usbip or usbredir...

The vulnerability of the `usbnet_generic_cdc_bind` function (drivers/net/usb/cdc_ether.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the usbnetgenericcdcbind function located in the drivers/net/usb/cdcether.c file in the Linux kernel arises due to errors during the zero-division operation. Exploitation of this vulnerability can allow an attacker, operating locally, to cause service failures or other effect...

The vulnerability of the qmi_wwanbind function (drivers/net/usb/qmi_wwan.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the qmiwwanbind function drivers/net/usb/qmiwwan.c in the Linux kernel arises due to errors during the execution of the zero-division operation. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects by using a specially crafted US...

The vulnerability of the asix_suspend function (drivers/net/usb/asix_devices.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the asixsuspend function drivers/net/usb/asixdevices.c in the Linux kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects, such as dereferencing the null pointer...

The vulnerability of the get_endpoints function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the getendpoints function in the drivers/usb/misc/usbtest.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure or other adverse effects through a specially crafted USB device...

Out-of-bounds

The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service...

CVE-2017-17558

The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service...

CVE-2017-16537

The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

Linux kernel local denial of service vulnerability (CNVD-2017-33487)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbnetgenericcdcbind' function in the drivers/net/usb/cdcether.c file in Linux kernel 4.13.11 and earlier...

CVE-2017-16643

The parsehidreportdescriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

Code injection

drivers/media/usb/dvb-usb/dib0700devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service BUG and system crash or possibly have unspecified other impact via a crafted USB device...

DEBIAN-CVE-2017-16647

drivers/net/usb/asixdevices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16646

drivers/media/usb/dvb-usb/dib0700devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service BUG and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16646

drivers/media/usb/dvb-usb/dib0700devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service BUG and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16645

The imspcugetcdcuniondesc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service imspcuparsecdcdata out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...