CVE-2018-10709

The CVE-2018-10709 entry concerns ASRock drivers: AsrDrv101.sys/AsrDrv102.sys in ASRock RGBLED, A-Tuning, F-Stream, RestartToUEFI. The described vulnerability arises from IOCTL interfaces that expose read/write access to CR register values, enabling local privilege escalation and potential code e...

CVE-2018-10711

The CVE-2018-10711 entry concerns ASRock driver components AsrDrv101.sys and AsrDrv102.sys used by ASRock RGBLED, A-Tuning, F-Stream, and RestartToUEFI. The driver versions listed expose functionality to read/write Machine Specific Registers (MSRs), enabling execution of arbitrary ring-0 code on ...

Talos Vulnerability Discovery Year in Review - 2018

Introduction Cisco Talos' Vulnerability Discovery Team investigates software and operating system vulnerabilities in order to discover them before malicious threat actors. We provide this information to vendors so that they can create patches and protect their customers as soon as possible. We...

Ubuntu 16.04 LTS / 18.04 LTS : X.Org X server vulnerability (USN-3802-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3802-1 advisory. Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper...

ASRock Drivers - Privilege Escalation

ASRock Drivers - Privilege Escalation SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...

ASRock Drivers - Privilege Escalation

SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...

Ubuntu: Security Advisory (USN-3802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

General Motors collected location & radio listening habits data of 90,000 drivers

By Waqas The listening habits of around 90,000 drivers of General Motors in Chicago and Los Angeles were monitored by the company for three months in 2017 under its radio-tracking program. The Detroit Free Press reported later released a report that General Motors was involved in targeted...

USN-3802-1: X.Org X server vulnerability

Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper. When certain graphics drivers are being used, a local attacker could possibly use this issue to overwrite arbitrary files and escalate privileges...

Intel Graphics Drivers Unified Shader Compiler Denial of Service Vulnerability

Intel Graphics Drivers is an integrated graphics driver developed by Intel Corporation, of which Unified Shader Compiler is a compiler. A denial of service vulnerability exists in the Unified Shader Compiler in Intel Graphics Drivers versions prior to 10.18.x.5056, 10.18.x.5057, and 20.19.x.5058....

CVE-2018-11019

CVV-2018-11019 affects the kernel component in Amazon Kindle Fire HD(3rd) running Fire OS 4.5.5.3. The issue is in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c and allows an attacker to inject a crafted argument via an ioctl on device /dev/gcioctl using command 3221773726, causing a kernel crash. ...

CVE-2018-11022

Vulnerability summary: The issue is in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c within the Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 kernel. An attacker can inject a crafted argument through an ioctl on device /dev/gcioctl using the command 3224132973, leading to a kernel crash. The connecte...

CVE-2018-11025

CVE-2018-11025 affects the kernel component used in Amazon Kindle Fire HD (3rd gen) running Fire OS 4.5.5.3. The flaw is in kernel/omap/drivers/mfd/twl6030-gpadc.c where an attacker can craft arguments for an ioctl on /dev/twl6030-gpadc with command 24832 to trigger a kernel crash. Documents prov...

CVE-2018-12154

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

Design/Logic Flaw

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

CVE-2018-12154

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

CVE-2018-12154

CVE-2018-12154 affects Intel Graphics Drivers Unified Shader Compiler. Lenovo’s advisory confirms the issue arises from not sanitizing malicious input in the Unified Shader Compiler, enabling an unprivileged local attacker to trigger an infinite loop and crash via specially crafted input (pre-10....

CVE-2018-12153

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access...

CVE-2018-12152

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access...

CVE-2018-12152

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access...