1161 matches found
CVE-2018-8343
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...
CVE-2018-8343: Buffer Copy without Checking Size of Input
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...
Microsoft Windows NDIS Local Elevation of Privilege Vulnerability
Microsoft Windows Network Driver Interface Specification NDIS is a component of Microsoft's Network Driver Interface Specification for use in Windows systems. A local elevation of privilege vulnerability exists in Microsoft Windows NDIS, which stems from ndis.sys not detecting the length of a...
CVE-2018-8342: Buffer Copy without Checking Size of Input
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID...
Windows NDIS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
Windows NDIS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
KB4343909: Windows 10 Version 1803 and Windows Server Version 1803 August 2018 Security Update (Foreshadow)
The remote Windows host is missing security update 4343909. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...
KB4343897: Windows 10 Version 1709 And Windows Server Version 1709 August 2018 Security Update (Foreshadow)
The remote Windows host is missing security update 4343897. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...
Qualcomm WLAN Driver Privilege Escalation
The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Intel Online Connect Access NDIS filter driver denial of service vulnerability
Intel Online Connect Access is a two-factor authentication program from Intel Corporation USA. The program is used to protect identity information, login information, etc. NDIS filter driver is one of the NDIS Network Driver Interface Speification filter driver. A security vulnerability exists in...
USN-3620-1 linux vulnerabilities
It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker with the CAPNETADMIN privilege could use this to cause a denial of service system crash or possibly execute arbitrary code...
Google Android Kernel Network Driver Information Disclosure Vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Kernel Network driver is one of the kernel network drivers. Kernel Network driver is one of the kernel network driver. An...
CVE-2017-13246
A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...
Information disclosure
A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...
CVE-2017-13246
A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...
CVE-2017-13246
CVE-2017-13246 affects the Android kernel network driver (Upstream kernel). It is described as an information‑disclosure vulnerability in the Network driver, with the Pixel/Nexus Android bulletin listing it under Kernel components as a Moderate‑severity issue. No concrete patch version or remedia...
CVE-2017-13246: Exposure of Sensitive Information to an Unauthorized Actor
A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...
PT-2018-5533
Name of the Vulnerable Software and Affected Versions: Android kernel Description: A information disclosure vulnerability exists in the Upstream kernel network driver, which may lead to sensitive data exposure. Recommendations: At the moment, there is no information about a newer version that...
CVE-2018-1000026
Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pa...
UBUNTU-CVE-2018-1000026
Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pa...