kernel: dev/parport: fix the array out-of-bounds risk

An array out-of-bounds flaw was found in dev/parport in the Linux kernel. This issue may result in a crash...

The vulnerability of the do_hardware_base_addr() function in the Linux kernel parallel port driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dohardwarebaseaddr function in the drivers/parport/procfs.c file of the Linux parallel port driver relates to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

DEBIAN-CVE-2024-42301

In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not overflowed. Below is the stack trace I...

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

The vulnerability of the connection tool to scanners using the parallel port umax_pp, related to segmentation errors, allows a intruder to cause a service failure.

The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

USN-3342-2 linux-hwe vulnerabilities

USN-3342-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. USN-3333-1 fixed a vulnerability in the Linux kernel. However, that fix introduced regressions...

USN-3342-1: Linux kernel vulnerabilities

USN 3326-1 fixed a vulnerability in the Linux kernel. However, that fix introduced regressions for some Java applications. This update addresses the issue. We apologize for the inconvenience. It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux...

Ubuntu 16.10 : linux-meta-raspi2, linux-raspi2 vulnerabilities (USN-3327-1) (Stack Clash)

It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2017-7374 It was discovered that the stack guard page for processes in the Linux kernel was not...

RHEL 6 : kernel (RHSA-2011:1106)

Updated kernel packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.0 Extended Update Support. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...

CVE-2002-1972

Unknown vulnerability in Parallel port powerSwitch aka pppowerSwitch 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports...

CVE-2002-1972

The CVE-2002-1972 entry concerns the parallel port powerSwitch (pp_powerSwitch) 0.1, where access controls are not properly enforced. This allows a local attacker to access arbitrary ports. The authenticated impact per CVSS shows Partial Confidentiality, Partial Integrity, and Partial Availabilit...

CVE-2002-1972

Unknown vulnerability in Parallel port powerSwitch aka pppowerSwitch 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports...