1694 matches found
CVE-2023-20561
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20562
Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...
CVE-2023-20560
Insufficient validation of the IOCTL Input Output Control input buffer in AMD RyzenTM Master may allow a privileged attacker to provide a null value, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...
CVE-2023-20562
Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver, potentially leading to arbitrary kernel execution. Mitigation Please contact AMD support for updates...
CVE-2023-20561
CVE-2023-20561 describes insufficient validation of the IOCTL input buffer in AMD μProf, enabling an authenticated user to send an arbitrary address that may crash Windows and cause denial of service. The issue is tied to the AMD μProf tool across Windows/Linux/FreeBSD with impact described as Do...
AMD Ryzen™ Master Security Bulletin
Bulletin ID: AMD-SB-7004 Potential Impact: Varies by CVE, see descriptions below Severity: V aries by CVE, see descriptions below Summary AMD Ryzen™ Master is a software tool that provides users access to advanced settings, such as clock and voltage settings, to control system performance in...
AZL-27759 CVE-2023-2430 affecting package kernel for versions less than 5.15.137.1-1
A vulnerability was found due to missing lock for IOPOLL flaw in iocqringeventoverflow in iouring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat...
kernel: scsi: qla2xxx: Fix crash when I/O abort times out
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xxprocessresponsequeue+0x42a/0x970 qla2xxx qla2x00startnvmemq+0x3a2/0x4b0 qla2xxx...
OESA-2023-1404 golang security update
The Go Programming Language Security Fixes: On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a...
PT-2023-6892
Name of the Vulnerable Software and Affected Versions AMD Radeon Graphics driver affected versions not specified Description The issue is related to improper privilege management in the AMD Radeon Graphics driver, which may allow an authenticated attacker to craft an IOCTL request to gain I/O...
CVE-2023-25937
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...
Lack of deadline parameter when executing swaps
Lines of code Vulnerability details Impact Deadline is not checked. The transaction may stay unexecuted for a long time, resulting in unfavourable trade when the transaction is finally executed. Proof of Concept The function OnRecvPacket is used to help users outside of Canto onboard seamlessly...
PT-2023-12910 · Hewlett Packard · Hp Bios
Name of the Vulnerable Software and Affected Versions: HP BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU issue has been identified in the HP BIOS for certain HP PC products. This may allow for arbitrary code execution, denial of service, and...
AZL-79002 CVE-2023-29403 affecting package golang 1.25.7-1
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...
PT-2023-13248 · Core · Core
Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in Core when processing ioctl commands from diag client applications. Recommendations: At t...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption due to buffer copying without checking the size of inputs in Core when processing ioctl commands from a diag client application...
kernel: iommu/vt-d: Clean up si_domain in the init_dmars() error path
A memory leak flaw was found in the Linux kernel's Intel VT-d IOMMU driver in the initialization error path. A local user can trigger this issue when the initdmars function fails during IOMMU setup, causing the sidomain memory to remain allocated without being freed. This results in a permanent...
kernel: drm/fb-helper: Fix out-of-bounds access
In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access in fbdev deferred I/O's damage handling. Fbdev's deferred I/O can only track pages. From the range of pages, the damage...
kernel: Linux kernel: Hard lockup in lpfc driver leads to Denial of Service
A flaw was found in the Linux kernel. A local user could trigger a hard lockup by concurrently reading the rxmonitor from debugfs during I/O operations in the lpfc driver. This concurrency issue, caused by insufficient spin lock protection, leads to a system crash and results in a Denial of Servi...