Lucene search
+L

1313 matches found

OSV
OSV
added 2022/05/28 11:3 a.m.4 views

OESA-2022-1679 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets...

8.2CVSS7.5AI score0.0053EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/12 6:16 p.m.21 views

CVE-2021-26351

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA Direct Memory Access read/write from/to invalid DRAM address that could result in denial of service...

5.5CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/12 5:18 p.m.98 views

CVE-2021-26351

CVE-2021-26351 corresponds to an insufficient DRAM address validation vulnerability in the AMD System Management Unit (SMU), which may allow a DMA read/write to an invalid DRAM address and cause a denial of service. Connected AMD advisories (AMD-SB-1027) map this issue to AMD platforms across des...

5.5CVSS6.3AI score0.00203EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/12 12:0 a.m.6 views

PT-2022-9734 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient DRAM address validation, which may lead to a denial of service due to DMA read/write operations from/to invalid DRAM addresses...

5.5CVSS5.3AI score0.00203EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.5 views

AMD System Management Unit 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. An input validation error vulnerability exists in the AMD System Management Unit that stems from an insufficient DRAM address validation in the AMD System Management Unit SMU could result in a DMA Direct...

5.5CVSS5.8AI score0.00203EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/05/11 6:59 p.m.3 views

kernel: use-after-free in RDMA listen()

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this...

7.8CVSS7.5AI score0.00296EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/05/11 12:0 a.m.6 views

PT-2022-9730 · Amd +1 · Amd Secure Processor +1

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor affected versions not specified Description: The issue is related to a failure to validate the integer operand in the ASP bootloader, which may allow an attacker to introduce an integer overflow in the L2 directory table ...

8.8CVSS5.5AI score0.00491EPSS
SaveExploits0References55
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.5 views

AMD System Management Unit 安全漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit that stems from a TOCTOU in the System Management Unit SMU that can lead to a denial of service due to a DMA direct memory access to an...

4.7CVSS5.4AI score0.00188EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:0 p.m.4 views

CVE-2021-26351

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA Direct Memory Access read/write from/to invalid DRAM address that could result in denial of service...

5.5CVSS5.6AI score0.00203EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/02 7:15 p.m.6 views

CVE-2021-3750

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions such as reset whi...

8.2CVSS7AI score0.0053EPSS
SaveExploits1References8
OSV
OSV
added 2022/05/02 7:15 p.m.15 views

AZL-9701 CVE-2021-3750 affecting package qemu for versions less than 6.2.0-16

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions such as reset whi...

8.2CVSS7AI score0.0053EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.17 views

The vulnerability of the Direct Memory Access (DMA) subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00462EPSS
SaveExploits1References20Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/04/05 1:15 p.m.6 views

CVE-2022-26360

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

7.8CVSS6.7AI score0.00344EPSS
SaveExploits0References10
OSV
OSV
added 2022/04/05 1:15 p.m.2 views

DEBIAN-CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

7.8CVSS6.3AI score0.00344EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 1:15 p.m.3 views

DEBIAN-CVE-2022-26359

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

7.8CVSS6.3AI score0.00341EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 1:15 p.m.9 views

UBUNTU-CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

7.8CVSS6.7AI score0.00344EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.8 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

7.8CVSS6.7AI score0.00344EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.6 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

7.8CVSS6.7AI score0.00341EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.7 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

7.8CVSS6.6AI score0.00344EPSS
SaveExploits0References12
Microsoft CVE
Microsoft CVE
added 2022/03/31 7:0 a.m.15 views

A memory leak flaw was found in the Linux kernel’s DMA subsystem in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.

...

5.5CVSS7.1AI score0.00462EPSS
SaveExploits1
Rows per page
Query Builder