openSUSE Security Update : the Linux Kernel (openSUSE-2020-1062)

The openSUSE Leap 15.2 was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-15393: usbtestdisconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 bnc1173514. - CVE-2020-12771: btreegccoalesce in drivers/md/bcache/btree....

Lenovo Drivers Management Unquoted Service Path Vulnerability

Lenovo Drivers Management is a driver management tool. A security vulnerability exists in versions prior to Lenovo Drivers Management 2.7.1128.1046. An attacker can exploit the vulnerability to execute code with elevated privileges...

Lenovo Drivers Management DLL Search Path Vulnerability

Lenovo Drivers Management is a driver management tool. A DLL search path vulnerability exists in versions prior to Lenovo Drivers Management 2.7.1128.1046. An attacker can exploit this vulnerability to execute code with elevated privileges...

CVE-2020-8317

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8317

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8326

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8326

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

Design/Logic Flaw

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

Path traversal

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8326

CVE-2020-8326 pertains to Lenovo Drivers Management, with an unquoted service path vulnerability in versions prior to 2.7.1128.1046 . An authenticated user could potentially execute code with elevated privileges due to the unquoted service path, as described in Lenovo/NVD entries. The affected co...

CVE-2020-8317

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8326

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8317

Lenovo Drivers Management (pre-2.7.1128.1046) is affected by a DLL search path vulnerability that could allow an authenticated user to execute code with elevated privileges. The issue concerns the DLL search path handling in Lenovo Drivers Management, enabling privilege escalation. No exploitatio...

CVE-2020-8317

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8326

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges...

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...

The vulnerability of the mwifiex_cmd.AppendAppend_vsie_tlv() function in Marvell Linux kernel drivers allows a hacker to escalate their privileges or cause service failures.

The vulnerability of the mwifiexcmd.AppendAppendvsietlv function in Marvell Linux kernel drivers is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to gain elevated privileges or cause service interruptions...

Code injection

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...

CVE-2019-20908

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...