Code Security Advent Calendar 2021

We are happy to announce our sixth consecutive Code Security Advent Calendar! Born at RIPS in 2016, each calendar comprises 24 little code puzzles containing hidden security vulnerabilities that wait to be spotted. This is our way to share good vibes with the community while learning and having f...

PT-2022-12036

Name of the Vulnerable Software and Affected Versions Wavpack version 5.4.0 Description An out of bounds read issue was discovered in the processing of .WAV files. This issue is triggered in the WavpackPackSamples function of the file src/pack utils.c, where the tainted variable cnt is too large,...

PT-2021-7279

Name of the Vulnerable Software and Affected Versions HPE iLO Amplifier Pack versions prior to 2.12 Description The issue is related to buffer overflow security vulnerabilities in the HPE iLO Amplifier Pack, which could allow a highly privileged user to remotely execute code, leading to a loss of...

CVE-2021-33092

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33092

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33091

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33087

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33093

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095

CVE-2021-33095 describes an unquoted search path in the installer for the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack prior to 1.0.0.4. Affected product/component: Intel NUC M15 Laptop Kit Keyboard LED Service driver pack (before 1.0.0.4). Root cause: unquoted search path in the ins...

CVE-2021-33088

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20039

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Management Engine driver pack versions prior to 15.0.10.1508 Description The issue is related to improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack. This may allow...

PT-2021-20044

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit audio driver pack versions prior to 1.3 Description The issue is related to insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack. This may allow an authenticated user to...

PT-2021-20048

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack versions prior to 1.0.0.4 Description The issue is related to an unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack. This may allo...

CVE-2021-33088: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20040

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack versions prior to 5.4.1.4449 Description The issue is related to incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack. Th...

PT-2021-20045

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit HID Event Filter driver pack versions prior to 2.2.1.383 Description The issue is related to incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack. This may allo...

PT-2021-20046

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Serial IO driver pack versions prior to 30.100.2104.1 Description The issue is related to insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack. This may allow an...

CVE-2021-33091: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095: Unquoted Search Path or Element

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33092: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...