DEBIAN-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

ALPINE-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

UBUNTU-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

Design/Logic Flaw

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

ASUS VivoMini/Mini PC Input Validation Error Vulnerability

The ASUS VivoMini/Mini PC is an ultra-thin compact mini PC from ASUS of Taiwan, China. The ASUS VivoMini/Mini PC suffers from an input validation error vulnerability that originates from a local attacker with system privileges who can modify the memory using a System Management Interrupt SMI, whi...

CVE-2021-36343

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Dell Bios 输入验证错误漏洞

Dell Bios is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS that stems from incorrect input validation of the software. A locally authenticated attacker could potentially exploit this vulnerability by using SMI...

CVE-2021-23236

Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system...

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

Input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

ASUS VivoMini/Mini PC 缓冲区错误漏洞

The ASUS VivoMini/Mini PC is an ultra-thin compact mini PC from ASUS of Taiwan, China. The ASUS VivoMini/Mini PC suffers from an input validation error vulnerability that originates from a local attacker with system privileges who can modify the memory using a System Management Interrupt SMI, whi...

PT-2022-15190 · Asus · Asus Vivomini/Mini Pc

Name of the Vulnerable Software and Affected Versions: ASUS VivoMini/Mini PC affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local attacker with system privilege can exploit this by using system management interrupt SMI to modify...

CVE-2021-41842

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check...

CVE-2021-41842

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check...

CVE-2021-45969

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM System Management Mode branch that registers a SWSMI handler that does not...

CVE-2020-5956

An issue was discovered in SdLegacySmm in Insyde InsydeH2O with kernel 5.1 before 05.15.11, 5.2 before 05.25.11, 5.3 before 05.34.11, and 5.4 before 05.42.11. The software SMI handler allows untrusted external input because it does not verify CommBuffer...

ASUS RT-AX56U has unspecified vulnerabilities

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A security vulnerability exists in the ASUS RT-AX56U Wi-Fi router, which stems from incorrect validation of the length of the httpd parameter. An attacker could use the vulnerability to initiate arbitrary code execution to control the...

Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. A buffer overflow vulnerability exists in InsydeH2O, which stems from the SWSMI handler not adequately...