EulerOS 2.0 SP9 : golang (EulerOS-SA-2021-1947)

According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb...

ASB-A-174886838

In smpprocesspairingpublickey of smpact.cc, there is a possible interception of Bluetooth pairing from an on-path attacker due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati...

ASB-A-174626251

In btmsecpincoderequest of btmsec.cc, there is a possible bypass of Bluetooth pairing pin-code due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

GSD-2021-1000286 crypto: sun8i-ss - Fix memory leak of pad

crypto: sun8i-ss - Fix memory leak of pad This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000297 crypto: sun8i-ss - fix result memory leak on error path

crypto: sun8i-ss - fix result memory leak on error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000461 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

GSD-2021-1000476 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

GSD-2021-1000383 crypto: sun8i-ss - Fix memory leak of pad

crypto: sun8i-ss - Fix memory leak of pad This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000293 crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map

crypto: sun8i-ss - Fix memory leak of object d when dmaiv fails to map This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000381 crypto: sa2ul - Fix memory leak of rxd

crypto: sa2ul - Fix memory leak of rxd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000438 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000461 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000438 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000284 crypto: sa2ul - Fix memory leak of rxd

crypto: sa2ul - Fix memory leak of rxd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit b7bd0657c2036add71981d88a7fae50188150b6...

UVI-2021-1000292 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000284 crypto: sa2ul - Fix memory leak of rxd

crypto: sa2ul - Fix memory leak of rxd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit b7bd0657c2036add71981d88a7fae50188150b6...

GSD-2021-1000292 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000389 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000383 crypto: sun8i-ss - Fix memory leak of pad

crypto: sun8i-ss - Fix memory leak of pad This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000487 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.269 by commit...