CVE-2023-4976

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array...

CVE-2023-4976 FlashBlade Authentication Mechanism Vulnerability

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array...

CVE-2023-4976

CVE-2023-4976 affects Pure FlashBlade. The flaw allows a local account to authenticate to the FlashBlade management interface via an unintended method, enabling privileged access to the array. The available sources (NVD/Red Hat) describe the impact as high confidentiality, integrity, and availabi...

PT-2024-13796 · Unknown · Purity//Fb

Name of the Vulnerable Software and Affected Versions: Purity//FB affected versions not specified Description: A flaw in the authentication mechanism allows a local account to access the management interface using an unintended method, potentially granting an attacker privileged access to the...

CVE-2022-48849 drm/amdgpu: bypass tiling flag check in virtual display case (v2)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case v2 vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when...

OPENSUSE-SU-2024:11270-1 python-rtslib-fb-common-2.1.74-2.7 on GA media

These are all security issues fixed in the python-rtslib-fb-common-2.1.74-2.7 package on the GA media of openSUSE Tumbleweed...

PT-2024-32795

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been identified, which can lead to a kernel crash when the fb variable is NULL. The issue is related to a smatch static checker warning in the vdec h264...

Tegra DRM Kernel Heap Buffer Overflow DoS

The vulnerability of the tegrafbcreate function in the drivers/gpu/drm/tegra/fb.c file of the Tegra DRM driver for the Linux operating system is related to improper manipulation of the reference counter for resources. Exploiting this vulnerability could allow an attacker to cause a service failur...

SUSE CVE-2021-47383

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

UBUNTU-CVE-2021-47383

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

UBUNTU-CVE-2024-35932

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane-state-fb == state-fb Currently, when using non-blocking commits, we can see the following kernel warning: 110.908514 ------------ cut here ------------ 110.908529 refcountt: underflow; use-after-free...

fb-bourse.com Cross Site Scripting vulnerability OBB-3890926

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-8253

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the fbmon component of the Linux kernel, where a division by zero can occur in the fb videomode from videomode function due to an overflow in the expression...

CVE-2023-52486

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drmmodepageflipioctl we proceed to unref the fb and then retry the whole thing from the top. But we forget to...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drmmodepageflipioctl we proceed to unref the fb and then retry the whole thing from the top. But we forget to...

CVE-2023-52486 drm: Don't unref the same fb many times by mistake due to deadlock handling

In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drmmodepageflipioctl we proceed to unref the fb and then retry the whole thing from the top. But we forget to...

Malicious code in nhatcoder-fb-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514bcd1028981b3a51b43d0f59deab5d625f73a52db290bee59c40e598bf0c86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-980 Malicious code in nhatcoder-fb-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514bcd1028981b3a51b43d0f59deab5d625f73a52db290bee59c40e598bf0c86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nhatcoder-fb-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

fb-bau.de Improper Access Control vulnerability OBB-3816829

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...