Buffer overflow

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar,...

Information disclosure

Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

"Value cannot be null. Parameter name: dnsName” Error when performing Infrastructure scans in Veeam Backup for AWS

For more information about Veeam Backup for AWS considerations and limitations, please review: Veeam Backup for AWS User Guide Planning and Preparation Considerations and Limitations Challenge When performing an infrastructure scan in Veeam Backup for AWS, you receive the following error: " Faile...

CVE-2019-14135

CVE-2019-14135 describes a vulnerability: an integer overflow that can overflow to a buffer overflow in WLAN parsing of nonstandard NAN IE messages. Reported across Qualcomm Snapdragon/wlan components (e.g., APQ8009, QCA4xxx, SDM platforms) and affecting Qualcomm closed-source components and rela...

CVE-2019-14134

CVE-2019-14134 describes a possible out-of-bounds access in the WLAN handler when the length field in the RX path is shorter than the expected country IE value in Qualcomm Snapdragon platforms (Compute, Consumer IOT, Industrial IOT, Mobile, and Wired Infrastructure/Networking). Affected products ...

CVE-2019-14009

Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2019-14009

CVE-2019-14009 corresponds to an out-of-bounds memory access in the TZ command handler on Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, IOT, Mobile, etc.) caused by improper input validation of the response length from user space. Affected components include Snapdragon devices acros...

CVE-2019-10589

CVE-2019-10589 concerns Qualcomm’s closed‑source components and affects multiple Snapdragon SKUs (Auto, Compute, Connectivity, IoT, Mobile, etc.). The issue is a lack of length checking of a GP command response buffer, which can cause a buffer overflow during response handling in affected Snapdra...

CVE-2019-10589

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-10547

When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 2 Hotfix 2 (3.5.2-39)

This update provides a stability fix for the metadata service. Vulnerability id: VSTOR-32856 Unreadable files may be created when using erasure coding during the upgrade from version 3.0 to 3.5...

Google Releases Security Updates

Google has released Chrome version 81.0.4044.113 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Oracle Solaris Critical Patch Update : apr2020_SRU11_3_36_20_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileg...

CVE-2020-2951

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2911

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

CVE-2020-2913

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2020-2914

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2020-2910

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2020-2902

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...