RLSA-2022:7623 Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: dovecot...

ALSA-2022:7623 Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: dovecot...

PT-2022-38099

Уязвимость функции lapbeth open модуля drivers/net/wan/lapbether.c драйвера сетевых устройств ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

PT-2022-38102

Уязвимость функции iforce init device модуля drivers/input/joystick/iforce/iforce-main.c драйвера устройств ввода ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38039

Уязвимость функции add mtd device модуля drivers/mtd/mtdcore.c драйвера памяти MTD ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

System Control Interface AsusSwitch Driver Privilege Escalation

The vulnerability of the System Control Interface and AsusSwitch drivers for Windows operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

System Control Interface and

The vulnerability of the System Control Interface and AsusSwitch drivers, as well as the AsusLiveUpdate.dll library for Windows operating systems, is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to write or delete any files from the Temp directory...

PT-2022-38214

Уязвимость функции pp set fine grain clk vol модуля drivers/gpu/drm/amd/pm/powerplay/amd powerplay.c драйвера инфраструктуры прямого рендеринга DRI видеокарт AMD ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушите...

PT-2022-38097

Уязвимость функции mdiobus register модуля drivers/net/phy/mdio bus.c драйвера сети физического уровня PHY ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

NTFS-3G security vulnerabilities

Tuxera NTFS-3G is a set of open source, cross-platform drivers for NTFS partition read and write support from the Finnish company Tuxera. A security vulnerability exists in NTFS-3G that originates from incorrectly validating certain NTFS metadata. An attacker could gain privileges by exploiting...

PT-2022-37990

Уязвимость функции mp2629 read raw модуля drivers/iio/adc/mp2629 adc.c драйвера различных типов встроенных датчиков ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в...

PT-2022-38212

Уязвимость функции alcor pci sdmmc drv probe модуля drivers/mmc/host/alcor.c драйвера карт MMC/SD/SDIO ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Linux kernel cm4000_cs.c competition condition vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/cm4000cs.c when calling open if cmmopen and cm4000detach, an attacker can exploit...

Fortinet FortiClient NDIS Miniport DoS

The vulnerability of NDIS Network Driver Interface Specification Miniport drivers in the Fortinet FortiClient for Windows security device is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-44032: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race condition between cmmopen and cm4000detach...

CVE-2022-44034: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24xcs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race condition between scr24xopen and scr24xremove...

CVE-2022-44033: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race condition between cm4040open and readerdetach...

CVE-2022-44034

The CVE-2022-44034 issue affects the Linux kernel (through 6.0.6) in the PCMCIA driver path, specifically drivers/char/pcmcia/scr24x_cs.c, where a race between scr24x_open() and scr24x_remove() can cause a use-after-free if a physically proximate attacker removes a PCMCIA device while open() is i...

CVE-2022-44033

CVE-2022-44033 affects the Linux kernel up to version 6.0.6, where a race condition in drivers/char/pcmcia/cm4040_cs.c can cause a use-after-free if a physically proximate attacker removes a PCMCIA device while open. The issue is described as a race between cm4040_open() and reader_detach(). The ...

CVE-2022-44033

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race condition between cm4040open and readerdetach...