The vulnerability of the mwifiex_process_country_ie() function (driver/net/wireless/marvell/mwifiex/sta_ioctl.c) in the Marvell WiFi driver for the Linux operating system exists due to a buffer overflow issue. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mwifiexprocesscountryie function driver/net/wireless/marvell/mwifiex/staioctl.c in the Marvell WiFi driver for the Linux operating system is related to memory buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

Denial Of Service (DoS)

github.com/mongodb/mongo-go-driver is vulnerable to denial of serviceDoS attacks. The library does not properly validate the length of BSON value in the ReadLength and ReadElement functions in bsoncore.go, leading to an integer overflow and an application crash...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

DEBIAN-CVE-2019-19536

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka CID-ead16e53c2f0...

CVE-2019-19537

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...

CVE-2019-18279

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019...

CVE-2019-18279

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019...

CVE-2019-18279

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019...

CVE-2019-18845

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

CVE-2019-18845

CVE-2019-18845 concerns the Patriot Viper RGB drivers MsIo64.sys and MsIo32.sys (pre-1.1). The vulnerability allows local attackers (including low integrity processes) to read/write arbitrary memory by mapping physical memory via ZwOpenSection/ZwMapViewOfSection, enabling the elevation to NT AUTH...

CVE-2019-18813

A memory leak in the dwc3pciprobe function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption by triggering platformdeviceaddproperties failures, aka CID-9bbfceea12a8...

CVE-2019-5049

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This...

USN-4162-2 linux-azure vulnerabilities

USN-4162-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 ESM. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach...

The vulnerability of the Profinet software driver for automation and control systems in industrial processes, allowing a intruder to trigger a service failure.

The vulnerability of the Profinet software driver for automation and control systems in industrial processes involves division by zero errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures by sending specially crafted DCP packets...

Integer overflow

The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigger an Integer Overflow and gain privileges via a malicious application. This occurs because of intentional access for the GPU process to /dev/dri/car...

The vulnerability of the hardware abstraction driver of the software tool for determining processor characteristics allows attackers to exploit their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the software-based hardware abstraction driver for the Intel Processor Identification Utility is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose sensitive information, or cause service failures...

The vulnerability of the driver for the Common Log File System (clfs.sys) in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Common Log File System clfs.sys driver in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

[SECURITY] [DLA 1919-2] linux-4.9 security update

Package : linux-4.9 Version : 4.9.189-3deb8u1 CVE ID : CVE-2019-0136 CVE-2019-9506 CVE-2019-11487 CVE-2019-15211 CVE-2019-15212 CVE-2019-15215 CVE-2019-15216 CVE-2019-15218 CVE-2019-15219 CVE-2019-15220 CVE-2019-15221 CVE-2019-15292 CVE-2019-15538 CVE-2019-15666 CVE-2019-15807 CVE-2019-15924...