Intel® Wireless for Open Source Advisory

Summary: A potential security vulnerability in the Intel® Wireless for Open Source may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8689 Description: Improper buffer restrictions in the IntelR Wireles...

PT-2020-6995

Name of the Vulnerable Software and Affected Versions EVGA Precision X1 versions through 1.0.6 winring0 project winring0 version 1.2.0 Description The WinRing0.sys and WinRing0x64.sys drivers versions 1.2.0 in EVGA Precision X1 through 1.0.6 contain a flaw that allows local users, including those...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Drivers may allow escalation of privilege and/or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0510 Description: Out of bounds read in...

openSUSE Security Update : python-rtslib-fb (openSUSE-2020-1156)

This update for python-rtslib-fb fixes the following issues : - Update to version v2.1.73 bsc1173257 CVE-2020-14019 : - version 2.1.73 - savetofile: fix fd open mode - saveconfig: copy temp configfile with permissions - saveconfig: open the temp configfile with modes set - Fix 'is not' with a...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1153)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow...

CVE-2020-7459

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

Input validation

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...

CVE-2020-7459

Removed by vendor...

CVE-2020-7459

CVE-2020-7459 affects FreeBSD 12.x and 11.x UDB network drivers (smsc(4), muge(4), cdceem(4)). The issue is a missing length validation in multiple USB network drivers that allows a malicious USB device to write beyond the end of an allocated network packet buffer, potentially enabling kernel or ...

Apple macOS Catalina Graphics Drivers Component Out-of-Bounds Read Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Graphics Drivers is one of the graphics driver components. A security vulnerability exists in the Graphics Drivers component in Apple macOS Catalina versions prior to 10.15.6. An attacker could exploit thi...

HPSBHF03681 rev. 2 - Intel® Graphics Drivers August 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities in some Intel® Graphics Drivers which may allow escalation of privilege and/...

FreeBSD-SA-20:21.usb_net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...

CentOS 7 : kernel (RHSA-2020:3220)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory. - Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially...

CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

DEBIAN-CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

UBUNTU-CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

Design/Logic Flaw

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c...

RHEL 7 : kernel (RHSA-2020:3224)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3224 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5791)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5791 advisory. - efi: Restrict efivarssdtload when the kernel is locked down Matthew Garrett Orabug: 31662729 CVE-2019-20908 Tenable has extracted the preceding description...