202 matches found
Fuchsia has unspecified vulnerabilities
Fuchsia is an open source general-purpose operating system. a security vulnerability exists in Fuchsia, which stems from the fact that the software can modify VMO data by accessing a copy-on-write snapshot, which can be exploited by local attackers to modify objects in VMO that they do not have...
fuchsia-star.com Cross Site Scripting vulnerability OBB-2384603
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-0247
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
CVE-2022-0247
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
Code injection
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
CVE-2022-0247 Write access to VMO data through copy-on-write in Fuchsia
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
CVE-2022-0247 Write access to VMO data through copy-on-write in Fuchsia
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
CVE-2022-0247
CVE-2022-0247 affects Fuchsia where VMO data can be modified via copy-on-write snapshots. A local attacker could modify VMO objects they lack permission to access, impacting integrity (per CVSS/I). The issue is tied to the copy-on-write handling in VMO data paths. A fix is available by upgrading ...
PT-2022-13065
Name of the Vulnerable Software and Affected Versions Fuchsia affected versions not specified Description An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots, allowing a local attacker to modify objects in the VMO that they do not have permission to...
Fuchsia 安全漏洞
Fuchsia is an open source general-purpose operating system. a security vulnerability exists in Fuchsia, which stems from the fact that the software can modify VMO data by accessing a copy-on-write snapshot, which can be exploited by local attackers to modify objects in VMO that they do not have...
CVE-2022-0247: Incorrect Permission Assignment for Critical Resource
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions...
CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel
An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...
CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel
An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...
Fuchsia 授权问题漏洞
Fuchsia is an open source general purpose operating system. A security vulnerability exists in fuchsia, which can be exploited by an attacker to bypass kernel mode page executability restrictions from user mode...
PT-2022-9253 · Google · Fuchsia
Name of the Vulnerable Software and Affected Versions: Fuchsia kernel versions prior to commit 7d731b4e9599088ac3073956933559da7bca6a00 Description: An incorrect setting of UXN bits within mmu flags to s1 pte attr leads to privileged executable pages being mapped as executable from an unprivilege...
perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp
Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5197616339484672 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...
A week in security (December 17 – 23)
Last week on Labs we looked at Fuchsia OS as a possible alternative for Android, explained all the reasons why cybercriminals want to hack your phone, discussed a flaw in Twitter form that may have been abused by nation states, gave you a Christmas tech scams roundup, revealed why many online...
Mobile Menace Monday: Is Fuchsia OS the end of Android?
It’s no secret that every year Google announces a new Android version. This time though, recent Google documents state that the next major Android version will be Android Q and not Android 9.1 Pie. In parallel, Google is also developing an operating system called Fuchsia that’s supposedly going t...
Unsupervised Coverage-Guided Kernel Fuzzer: syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer. Linux kernel fuzzing has the most support, akaros, freebsd, fuchsia, netbsd and windows are supported to varying degrees. Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it’s being extended to support other ...
fuchsia_fidl: Crash in fidl::Lexer::Peek
Detailed report: https://oss-fuzz.com/testcase?key=6200421431377920 Project: fuchsiafidl Fuzzer: libFuzzerfuchsiafidlfuzzer Fuzz target binary: fuchsiafidlfuzzer Job Type: libfuzzerasanfuchsiafidluntrusted Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x614000010000 Crash State:...