218 matches found
GSD-2021-1001854 drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
drm/edid: In connectorbadedid cap numofext by numblocks read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...
kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service
A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data EDID technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial ...
CVE-2019-12382
A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data EDID technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial ...
kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service
A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data EDID technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial ...
UBUNTU-CVE-2019-12382
An issue was discovered in drmloadedidfirmware in drivers/gpu/drm/drmedidload.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: The vendor disputes this issues as...
DEBIAN-CVE-2019-12382
An issue was discovered in drmloadedidfirmware in drivers/gpu/drm/drmedidload.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: The vendor disputes this issues as...
Linux kernel denial of service vulnerability (CNVD-2019-16432)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in drmloadedidfirmware in drivers/gpu/drm/drmedidload.c in Linux kernel 5.1....
PT-2019-6145 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.1.5 Description: An issue was discovered in the drm load edid firmware function in the Linux kernel, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash due to a...
Buffer overflow
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID hdmitxsysfswtaedid, if edidsize, which is controlled by userspace, is too large, a buffer overflow occurs...
CVE-2017-9722
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID hdmitxsysfswtaedid, if edidsize, which is controlled by userspace, is too large, a buffer overflow occurs...
CVE-2017-11093
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer Over-read in Display due to the lack of an upper-bound validation when reading "numofceablocks" from the untrusted source EDID, kernel memory can be exposed...
Oracle Linux 6.1 kernel security, bug fix and enhancement update
2.6.32-131.0.15.el6 - build disable Werr for external modules Aristeu Rozanski 703504 2.6.32-131.0.14.el6 - scsi hpsa: fix reading a write only register causes a hang Rob Evers 703262 - scsi mpt2sas: remove the use of writeq, since writeq is not atomic Tomas Henzl 701947 2.6.32-131.0.13.el6 - scs...
Fedora 14 : kernel-2.6.35.4-28.fc14 (2010-14832)
Fix possible local privilege escalation on x8664 systems CVE-2010-3081, CVE-2010-3301. - NOTE: All users should update because of this bug. Fix denial of service attack with large argument lists. Add support for perl and python scripting to perf. Nouveau video driver fixes : - fix oops in acpi ed...
MDVA-2008:040 : monitor-edid
This update adds support for getting EDID information from a different DDC port and uses it by default to also get port 1. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...
MDVA-2008:059 : drakx-kbd-mouse-x11
An updated XFdrake is available that corrects a number of bugs: - never write a ModeLine when using the fglrx driver bug 30934 - if the EDID gives a valid EISAID, a valid 16/10 preferred resolution, but no HorizSync/VertRefresh, use a generic flat panel HorizSync/VertRefresh needed for...
Mandriva Update for monitor-edid MDVA-2008:040 (monitor-edid)
Check for the Version of monitor-edid OpenVAS Vulnerability Test Mandriva Update for monitor-edid MDVA-2008:040 monitor-edid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for drakx-kbd-mouse-x11 MDVA-2008:059 (drakx-kbd-mouse-x11)
Check for the Version of drakx-kbd-mouse-x11 OpenVAS Vulnerability Test Mandriva Update for drakx-kbd-mouse-x11 MDVA-2008:059 drakx-kbd-mouse-x11 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for monitor-edid MDVA-2008:040 (monitor-edid)
Check for the Version of monitor-edid OpenVAS Vulnerability Test Mandriva Update for monitor-edid MDVA-2008:040 monitor-edid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...