CVE-2019-15876

CVE-2019-15876: In FreeBSD, driver-specific oce(4) ioctl(2) handlers failed to check privileges, allowing unprivileged users to send passthrough commands to device firmware. Affects FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEA...

CVE-2019-15876

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged user...

CVE-2019-15877

CVE-2019-15877 affects FreeBSD ixl(4): driver-specific ioctl handlers fail to verify privileges, allowing unprivileged users to trigger updates to the device’s non-volatile memory in FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3. The FreeBSD security advisory SA-20:06...

CVE-2019-15877

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

CVE-2019-15877

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

CVE-2019-15876: Missing Authorization

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged user...

CVE-2019-15877: Missing Authorization

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...

Integer Overflow

The kernel-rt is vulnerable to Integer Overflow. A flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interface may be split across multiple hardware receive descriptors. Receipt of such a frame could leak through a validation check,...

Buffer overflow

hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...

PT-2020-9764

Name of the Vulnerable Software and Affected Versions FreeBSD versions 12.1-STABLE before r356089 FreeBSD versions 12.1-RELEASE before 12.1-RELEASE-p3 FreeBSD versions 11.3-STABLE before r356090 FreeBSD versions 11.3-RELEASE before 11.3-RELEASE-p7 Description The issue arises from driver specific...

PT-2020-9765

Name of the Vulnerable Software and Affected Versions FreeBSD versions 12.1-STABLE before r356606 FreeBSD versions 12.1-RELEASE before 12.1-RELEASE-p3 Description The issue arises from driver specific ioctl command handlers in the ixl network driver that failed to check whether the caller has...

Windows NDIS Information Disclosure

The vulnerability of the Network Driver Interface Standard NDIS implementation in Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2020-0861

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

CVE-2020-0861

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

CVE-2020-0861: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...

Microsoft Windows Network Driver Interface Specification Information Disclosure Vulnerability (CNVD-2020-28440)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. The Windows Network Driver Interface Specification NDIS is one of the network driver...

Network Driver Interface Standard NDIS Disclosure

The vulnerability of the Network Driver Interface Standard NDIS implementation in Windows operating systems exists due to an object handling error in memory. Exploiting this vulnerability can allow a perpetrator to disclose protected information through a specially created application...

Microsoft Windows Network Driver Interface Specification Information Disclosure Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An information disclosure vulnerability exists in the implementation when the Windows Network Driver Interface Specification component fails to properly handle memory, whi...

QEMU Buffer Overflow Vulnerability (CNVD-2020-10714)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the iSCSI Block driver in version 2.12.0 prior to QEMU 4.2.1. The vulnerability...

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification NDIS improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification NDIS...