2387 matches found
ASB-A-268038643
In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no addition...
CVE-2022-46527
ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...
PT-2023-14955 · Elsys · Elsys Ers 1.5 Sound
Name of the Vulnerable Software and Affected Versions: ELSYS ERS 1.5 Sound version 2.3.8 Description: A buffer overflow issue was discovered in the NFC data parser. Recommendations: For version 2.3.8, at the moment, there is no information about a newer version that contains a fix for this issue...
USN-6332-1 linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities
Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 William Zhao discovered that the Traffic Control T...
USN-6331-1: Linux kernel (Azure) vulnerabilities
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...
CLSA-2023-1693431257 Fix of 17 CVEs
Jammy update: v5.15.75 upstream stable release LP: 1996825 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size Jammy update: v5.15.61 upstream stable release LP: 1990162 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check i...
CLSA-2023-1693429208 Fix of 17 CVEs
Jammy update: v5.15.75 upstream stable release LP: 1996825 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size Jammy update: v5.15.61 upstream stable release LP: 1990162 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check i...
USN-6314-1: Linux kernel vulnerabilities
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...
USN-6311-1 linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15 vulnerabilities
William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the NTFS file system...
USN-6301-1: Linux kernel vulnerabilities
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...
USN-6300-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the NTFS file system...
USN-6300-1: Linux kernel vulnerabilities
William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the NTFS file system...
OESA-2023-1494 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.CVE-2023-3863 A use-after-free...
OESA-2023-1495 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.CVE-2023-3863 A use-after-free...
CBL Mariner 2.0 Security Update: kernel (CVE-2023-3863)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3863 advisory. - A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This fl...
CVE-2023-36482
An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...
Code injection
An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...
CVE-2023-36482
CVE-2023-36482 affects Samsung NFC implementations (S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, S3NRN82). The underlying issue is a buffer copy operation performed without validating input size, which can cause the NFC service to restart. The NVD entry reports a CVSSv3.1 base score of 4.3 (Medium) with a...
