Lucene search
+L

862 matches found

Mend
Mend
•added 2020/11/30 6:28 a.m.•5 views

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

5CVSS0.00585EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
•added 2020/11/30 6:28 a.m.•89 views

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

5CVSS6AI score0.00585EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/11/30 6:28 a.m.•49 views

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

5.8AI score0.00585EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2020/11/30 12:00 a.m.•22 views

QEMU buffer error vulnerability

QEMU is a suite of analog processor software. QEMU suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a stack buffer over-read via a value obtained from a host controller driver...

5CVSS7AI score0.00585EPSS
SaveExploits1References11
osv_ubuntu
osv_ubuntu
•added 2020/11/18 8:28 a.m.•20 views

UBUNTU-CVE-2020-25723

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on t...

3.2CVSS6.7AI score0.00365EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/11/18 12:00 a.m.•36 views

PT-2020-6485

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileg...

7.8CVSS6.6AI score0.00585EPSS
SaveExploits1References394
Lenovo
Lenovo
•added 2020/11/13 8:40 p.m.•56 views

Intel CSI2 Host Controller Advisory - Lenovo Support US

No description provided...

5.5CVSS5.5AI score0.00307EPSS
SaveExploits0
NVD
NVD
•added 2020/11/12 7:15 p.m.•23 views

CVE-2020-0573

Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.1AI score0.00307EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/12 6:54 p.m.•35 views

CVE-2020-0573

Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access...

5.4AI score0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2020/11/12 6:54 p.m.•75 views

CVE-2020-0573

Intel CSI2 Host Controller driver contains an out-of-bounds read that may allow an authenticated local user to disclose information. Affected product: Intel CSI2 Host Controller driver. Root cause: out-of-bounds read. Impact: information disclosure via local access (CVE-2020-0573). Remediation: u...

5.5CVSS5AI score0.00307EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•10 views

CVE-2020-0573: Out-of-bounds Read

Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.9AI score0.00307EPSS
SaveExploits0References2
Intel
Intel
•added 2020/11/10 12:00 a.m.•43 views

Intel CSI2 Host Controller Advisory

Summary: A potential security vulnerability in the Intel Camera Serial Interface CSI 2 Host Controller driver may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0573 Description: Out of bounds read...

5.5CVSS5.1AI score0.00307EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•7 views

PT-2020-4980

Name of the Vulnerable Software and Affected Versions Intel CSI2 Host Controller driver affected versions not specified Description The issue is related to an out of bounds read in the Intel CSI2 Host Controller driver, which may allow an authenticated user to potentially enable information...

5.5CVSS0.00307EPSS
SaveExploits0References6
Veracode
Veracode
•added 2020/11/03 5:01 a.m.•37 views

Denial Of Service (DoS)

Wildfly is vulnerable to denial of service DoS. An out of memory OOM error occurs as host-controller is looping to generate new connections which are not properly closed while not able to connect to domain-controller...

6.5CVSS3.7AI score0.01487EPSS
SaveExploits1References3Affected Software21
Positive Technologies
Positive Technologies
•added 2020/10/30 12:00 a.m.•13 views

PT-2020-16159 · Red Hat · Wildfly

Name of the Vulnerable Software and Affected Versions: WildFly versions up to 21.0.0.Final Description: A memory leak flaw was found in WildFly where the host-controller tries to reconnect in a loop, generating new connections that are not properly closed while unable to connect to the...

6.8CVSS6.2AI score0.01487EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/30 12:00 a.m.•6 views

CVE-2020-25689: Missing Release of Memory after Effective Lifetime

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory OOM issue...

6.8CVSS5.4AI score0.01487EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/10/22 5:05 p.m.•43 views

CVE-2020-27661

A divide-by-zero flaw was found in QEMU in the dwc-hsotg dwc2 USB host controller emulation. More specifically, HCCHARMPS was read from a device register and later used as a divisor without performing a sanity check. This flaw allows a malicious or buggy guest to crash the QEMU process on the hos...

6.5CVSS2.6AI score0.00314EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/10/15 12:00 a.m.•4 views

PT-2020-6734

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A divide-by-zero issue was found in the dwc2 handle packet function in the hw/usb/hcd-dwc2.c file of the hcd-dwc2 USB host controller emulation. This issue could be exploited by a malicious gues...

6.5CVSS0.00314EPSS
SaveExploits0References19
osv_ubuntu
osv_ubuntu
•added 2020/09/25 5:15 a.m.•13 views

UBUNTU-CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

5.3CVSS6.9AI score0.00445EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2020/09/25 12:00 a.m.•42 views

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

5CVSS7.1AI score0.00585EPSS
SaveExploits1References4
Rows per page
Query Builder