76 matches found
PT-2022-10742
Name of the Vulnerable Software and Affected Versions Zephyr versions = v2.6.0 Description The RNDIS USB device class includes a buffer overflow vulnerability, specifically a Heap-based Buffer Overflow CWE-122. Recommendations For Zephyr versions = v2.6.0, at the moment, there is no information...
PT-2022-10713
Name of the Vulnerable Software and Affected Versions Zephyr versions = v2.6.0 Description The issue is related to a buffer overflow in the USB device class, specifically a heap-based buffer overflow. This is classified as CWE-122. Recommendations For Zephyr versions = v2.6.0, at the moment, ther...
CVE-2021-3861: Heap-based Buffer Overflow
The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj...
CVE-2021-3835: Heap-based Buffer Overflow
Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...
CVE-2019-2226
In deviceclasstoint of deviceclass.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8...
F5 Networks BIG-IP : Linux kernel vulnerability (SOL15746)
block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping opcodes.CVE-2012-4542 C Tenable Network...
[Harald scan] Bluetooth discovery scanning
Harald Scan is able to determine Major and Minor device class of device, as well as attempt to resolve the device's MAC address to the largest known Bluetooth MAC address Vendor list. If you are running Harald Scan and see a entry with 'Unknown' in the vendor column pleaseemail me the file which ...
kernel: block: default SCSI command filter does not accomodate commands overlap across device classes
block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping opcodes...
kernel: block: default SCSI command filter does not accomodate commands overlap across device classes
block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping opcodes...
Oracle Linux 6 kernel security and bugfix update
2.6.32-358.el6 - fs Fix sget race with failing mount Eric Sandeen 883276 2.6.32-357.el6 - virt xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests Andrew Jones 896050 CVE-2013-0190 - block sgio: use different default filters for each device class Paolo Bonzini 875361...
kernel: block: default SCSI command filter does not accomodate commands overlap across device classes
block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping opcodes...
DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'
DMA2005-1214a - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping' Author: Kevin Finisterre Vendor: http://www.widcomm.com, http://www.broadcom.com/products/Bluetooth/ Product: 'versions = BTW 4.0.1.1500 ?' References: http://www.digitalmunition.com/DMA2005-1214a.txt Description: Wh...
Driver Flighting Check for System Ring2
Evaluates to true if client machine is targeting to Ring2 of System Generic device class...
Driver Flighting Check for Graphics Partner Test
Evaluates to true if client machine is targeting to "Partner" Ring of Graphics device class...