DEBIAN-CVE-2021-46933

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Clear ffseventfd in ffsdataclear. ffsdataclear is indirectly called from both ffsfskillsb and ffsep0release, so it ends up being called twice when userland closes ep0 and then unmounts ffs. If userland provided ...

UBUNTU-CVE-2021-46933

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Clear ffseventfd in ffsdataclear. ffsdataclear is indirectly called from both ffsfskillsb and ffsep0release, so it ends up being called twice when userland closes ep0 and then unmounts ffs. If userland provided ...

CVE-2023-40114

In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-5885

CVE-2023-5885 affects Franklin Electric Fueling Systems Colibri (discontinued Colibri product). The vulnerability is a Path Traversal (CWE-35) that allows a remote attacker to access files on the system, including files containing login credentials for other users. Affected scope: Colibri firmwar...

CVE-2023-5885: Path Traversal: '.../...//'

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users...

K10631282: Flip Feng Shui (FFS) vulnerability

Security Advisory Description Flip Feng Shui FFS a new exploitation vector that allows an attacker to induce bit flips over arbitrary physical memory in a fully controlled way. FFS relies on the following underlying primitives: The ability to induce bit flips in controlled but not predetermined...

PT-2023-35360 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.305 Description: A potential issue exists due to a race condition during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.272 Description A potential issue exists due to a race condition during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-35153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description A potential issue exists due to a race during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-35230

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description A potential issue exists due to a race condition during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-35291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description A potential issue exists due to a race during ffs ep0 queue wait. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2022-44039

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

Default credentials

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

CVE-2022-44039: Incorrect Authorization

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

CVE-2022-44039

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

CVE-2022-44039

The CVE-2022-44039 entry concerns Franklin Fueling System FFS Colibri 1.9.22.8925, where a file system overwrite vulnerability exists due to insecure use of fopen with mode wb. This can enable an attacker to remotely overwrite critical files (e.g., system.conf, passwd), potentially leading to pri...

CVE-2021-46421

Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information...

CVE-2021-46420

Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information...

Directory traversal

Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information...

Directory traversal

Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information...