3637 matches found
Input validation
Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12332
Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12332
CVE-2020-12332 affects the Intel HID Event Filter Driver; the installer permissions flaw may allow an authenticated local user to escalate privileges. Intel’s advisory (and vendor posts) indicate all versions prior to 2.2.1.372 are affected. Mitigation: update to the latest driver version as prov...
Intel® HID Event Filter Driver Advisory
Summary: A potential security vulnerability in the Intel® Human Interface Device HID Event Filter Driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12332 Description: Improper permissions i...
DigitalPersona 4.5.0.2213 - (DpHostW) Unquoted Service Path Vulnerability
Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path Exploit Author : SamAlucard Vendor : DigitalPersona U. are U. One Touch Version : DigitalPersona Pro 4.5.0.2213 Vendor Homepage : https://www.hidglobal.com/crossmatch Tested on OS: Windows 10 Home Analyze PoC :...
DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path
Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path Exploit Author : SamAlucard Exploit Date: 2020-11-08 Vendor : DigitalPersona U. are U. One Touch Version : DigitalPersona Pro 4.5.0.2213 Vendor Homepage : https://www.hidglobal.com/crossmatch Tested on OS: Windows 10 Home...
Important: kernel
Issue Overview: An issue in the HID driver in the Linux kernel may lead to invalid memory access. CVE-2022-20565 In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in...
AutoGadgetFS - USB Testing Made Easy
What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...
kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
A vulnerability was found in hiddevopen in drivers/hid/usbhid/hiddev.c in the USB Human Interface Device class subsystem, where an existing device must be validated prior to its access. The device should also ensure the hiddevlist cleanup occurs at failure, as this may lead to a use-after-free...
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...
A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.
...
openSUSE Security Update : the Linux Kernel (openSUSE-2020-1382)
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1382-1 Rating: important References: 1065729 1071995 1085030 1133021 1154492 1156395 1159058 1160634 1169790 1171634 1171688 1172108 1172418 1172871 1173485 1173798 1174003 1174026 1174387 1174699...
Buffer overflow
NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...
CVE-2020-9063
NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...
CVE-2020-9063
Summary of CVE-2020-9063: NCR SelfServ ATMs with APTRA XFS 05.01.00 or older have USB HID communications between the currency dispenser and the host that are not authenticated or protected for integrity, allowing a physically proximate attacker to cause a host buffer overflow, inject a payload, a...
kernel security and bug fix update
3.10.0-1127.18.2.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 setlease be called without ilock Jeff Layton...
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze
Summary AT&T has released versions 1801-ze for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...
