10913 matches found
BlackByte uses a new attack technique to target vulnerable Windows drivers
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary BlackByte Ransomware is leveraging a security flaw in a legitimate Windows driver to conduct a new bring your own vulnerable driver BYOVD attack...
Linux kernel resource management error vulnerability (CNVD-2022-69188)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel version 5.19.12 and earlier versions, which stems from the presence of a race condition in...
BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions
In yet another case of bring your own vulnerable driver BYOVD attack, the operators of the BlackByte ransomware are leveraging a flaw in a legitimate Windows driver to bypass security solutions. "The evasion technique supports disabling a whopping list of over 1,000 drivers on which security...
Excessive grant frame usage in Windows xenbus drivers after version 9.1.3
A VM with 2 VBD, 8 vCPUs, 7 VIFs may consume over 90 grant tables, but ONLY consume 26grant tables when running with xen PV driver version 9.1.2. It will lead to virtual NIC initialization failure issue after Windows VM startup. Device manager shows NICs are notinitialized: Setupapi.log : Device...
PT-2022-5923
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A vulnerability in the Linux Kernel has been identified, affecting the intr callback function of the drivers/net/usb/r8152.c file in the BPF component. This issue is related to incorrect...
USN-5648-1 linux-gke-5.15 vulnerabilities
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...
CVE-2022-41848: Concurrent Execution using Shared Resource with Improper Synchronization
drivers/char/pcmcia/synclinkcs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl, aka a race condition between mgslpcioctl and mgslpcdetach...
PT-2022-37832
Уязвимость функции print wrapper info модуля drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c драйвера мультимедийных устройств ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо,...
CVE-2022-41850
roccatreportevent in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report-value is in progress...
DEBIAN-CVE-2014-0144
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privilege...
Integer overflow
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privilege...
PT-2022-38172
Уязвимость функции adm slave config модуля drivers/dma/qcom/qcom adm.c драйвера движка DMA ядра операционной системы Linux связана с некорректным сравнением. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информац...
HPESBGN04364 rev.1 - HPE Intel 500 and 700 Series Ethernet Controllers, INTEL-SA-00650, Intel Ethernet VMware Drivers Advisory, Local Denial of Service (DoS)
Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter - Prior to Gen10 Service Pack for ProLiant 2022.09.0 - Intel Ethernet 700 Series Controller HPE Ethernet 10Gb 2-port SFP+...
s390utils bug fix and enhancement update
An update is available for s390utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The s390utils packages contain a set of user-space utilities that should be...
PT-2022-38014
Уязвимость функции dwc3 probe модуля drivers/usb/dwc3/core.c драйвера контроллера на базе DesignWare USB3 ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-5929
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.15 Linux kernel versions 6.x prior to 6.0.1 Description The issue is related to a buffer overflow in the drivers/usb/mon/mon bin.c file of the Linux kernel, which can be exploited by a user-space client to...
CVE-2022-41218
In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvbdemuxopen and dvbdmxdevrelease...
CVE-2022-41218: Use After Free
In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvbdemuxopen and dvbdmxdevrelease...
PT-2022-38034
Уязвимость функции rpmsg chrdev eptdev destroy модуля drivers/rpmsg/rpmsg char.c ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...
