CVE-2024-5148

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and...

CVE-2022-33250

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover...

Design/Logic Flaw

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover...

CVE-2022-33250 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover...

CVE-2022-33250

The CVE-2022-33250 issue is a transient Denial of Service in a Qualcomm modem during NR to LTE handover when the network repeatedly sends invalid message containers. Root cause described as a reachable assertion in the modem code under that handover path. Impact is High for Availability with no c...

CVE-2022-33250 Reachable assertion in Modem

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover...

PT-2023-13261 · Qualcomm · Snapdragon +61

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS condition that occurs when a modem receives repeated invalid message containers for NR to LTE...

GSD-2022-1004556 serial: 8250: Fix PM usage_count for console handover

serial: 8250: Fix PM usagecount for console handover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G

Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service DoS and man-in-the-middle MitM attacks using low-cost equipment. The "vulnerabilities in the...

CVE-2021-26933

An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...

The vulnerability of the Android CAF-release operating system, due to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information during a handover scenario.

The vulnerability of Android CAF-release operating systems exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, or accessibility of protected information during a handover scenario...

Court Orders DreamHost to handover data on anti-Trump site

By Waqas About a week ago, it was reported that the Department This is a post from HackRead.com Read the original post: Court Orders DreamHost to handover data on anti-Trump site...

CVE-2016-10387

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario...

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario...

CVE-2016-10387

CVE-2016-10387 concerns Qualcomm CAF Android devices using the Linux kernel, where an assertion could be reachable during a handover. The CVSS3/3.0 score is 9.8 (CRITICAL) with high impact to confidentiality, integrity, and availability, indicating severe risk if exploitable. The provided Connect...

CVE-2016-10387

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario...

IRCCloud: Unvalidated Channel names causes IRC Command Injection

IRCCloud does not validate the channel names created by a user causing it to be parsed as an IRC command such as QUIT. This means the user can have their clients force-closed by a malicious channel name. This could also lead to other command injections such as forcing the handover of channels to...