CVE-2018-16721

CVE-2018-16721 affects Jingyun Antivirus v2.4.2.39, where the driver ZySandbox.sys fails to validate inputs for IOCTL 0x12360090, enabling a local attacker to cause a denial of service (BSOD) or other unspecified impact. The issue is related to CVE-2018-16306. The CVSS data indicates LOCAL attack...

CVE-2018-16722

In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305...

CVE-2018-16723

In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020...

CVE-2018-16720: Improper Input Validation

In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304...

CVE-2018-16721: Improper Input Validation

In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090, a related issue to CVE-2018-16306...

CVE-2018-16722: Improper Input Validation

In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305...

PT-2020-8560

Name of the Vulnerable Software and Affected Versions: Jingyun Antivirus version 2.4.2.39 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact. This is because the driver file ZySandbox.sys does not validate input values from IOCtl...

PT-2020-8559

Name of the Vulnerable Software and Affected Versions: Jingyun Antivirus version 2.4.2.39 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482 in the driver file...

PT-2020-8561

Name of the Vulnerable Software and Affected Versions: Jingyun Antivirus version 2.4.2.39 Description: The issue is related to the driver file ZySandbox.sys, which does not validate input values from IOCtl 0x12360090. This can allow local users to cause a denial of service BSOD or possibly have...

CVE-2018-16719: Improper Input Validation

In Jingyun Antivirus v2.4.2.39, the driver file hookbody.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482...

PT-2020-8556

🚨 CVE-2018-16721 In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090, a related issue to CVE-2018-16306. 🎖@cveNotify...

PT-2020-8554

‼ CVE-2018-16720 ‼ In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304. 📖 Read via "National...

PT-2020-8562

Name of the Vulnerable Software and Affected Versions: Jingyun Antivirus version 2.4.2.39 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact. This is because the driver file ZySandbox.sys does not validate input values from IOCtl...

PT-2020-8555

🚨 CVE-2018-16722 In Jingyun Antivirus v2.4.2.39, the driver file ZySandbox.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305. 🎖@cveNotify...

PT-2020-8563

Name of the Vulnerable Software and Affected Versions: Jingyun Antivirus version 2.4.2.39 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020 in the driver file...

CVE-2020-15481

CVE-2020-15481 affects PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel drivers DirectIo32.sys and DirectIo64.sys expose IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the calling process’...

Oracle Linux 7 : kernel (ELSA-2020-5023)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5023 advisory. - net bluetooth: l2cap: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888253 CVE-2020-12351 - net bluetooth: a2mp: Fix not initializin...

Microsoft Windows bindflt Driver Missing Authentication Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the bindflt.sys...

systemd security, bug fix, and enhancement update

239-40.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS.Lack of validation in getrawsocket in drivers/vhost/net.c of an skfamily field allows to attacker perform ioctl2 calls on the '/dev/vhost-net' device may use this flaw to crash the kernel...