Lucene search
+L

219 matches found

OSV
OSV
added 2020/08/11 8:15 p.m.8 views

UBUNTU-CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

6.8CVSS7AI score0.00214EPSS
SaveExploits0References5
OSV
OSV
added 2020/07/22 2:15 p.m.6 views

CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

6CVSS6.7AI score0.00503EPSS
SaveExploits0References4
NVD
NVD
added 2020/07/22 2:15 p.m.30 views

CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

6CVSS5.9AI score0.00503EPSS
SaveExploits0References4
Prion
Prion
added 2020/07/22 2:15 p.m.25 views

Improper access control

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...

3.6CVSS5.9AI score0.00503EPSS
SaveExploits0References4Affected Software133
CVE
CVE
added 2020/07/22 1:21 p.m.88 views

CVE-2019-18618

CVE-2019-18618 concerns the Synaptics VFS75xx fingerprint sensors with external flash. The firmware exposes an incorrect access control vulnerability that, on all versions prior to 2019-11-15, can let a local administrator or physical attacker access sensor data by injecting an unverified partiti...

6CVSS6.4AI score0.00503EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2020/04/10 1:4 a.m.31 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through a heap overflow flaw in the EFI GUID Partition Table GPT implementation could allow a local attacker to cause a denial of service by mounting a disk containing specially-crafted partition tables...

6.1CVSS2.5AI score0.00542EPSS
SaveExploits0References12Affected Software2
OSV
OSV
added 2019/07/29 3:15 p.m.1 views

DEBIAN-CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS6.8AI score0.0043EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/29 3:15 p.m.20 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS7AI score0.0043EPSS
SaveExploits0References6
OSV
OSV
added 2019/07/29 3:15 p.m.26 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS6.6AI score
SaveExploits0References6
OSV
OSV
added 2019/07/29 3:15 p.m.4 views

UBUNTU-CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS6.7AI score0.0043EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2019/07/29 3:15 p.m.4 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS5.5AI score0.0043EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2019/07/29 3:15 p.m.27 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS6.8AI score0.0043EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/07/29 2:52 p.m.31 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

8AI score0.0043EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2019/07/29 2:52 p.m.72 views

CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data...

7.1CVSS8.2AI score0.0043EPSS
SaveExploits0
OSV
OSV
added 2019/05/03 1:29 p.m.1 views

DEBIAN-CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS9.3AI score0.0119EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/05/03 1:29 p.m.29 views

CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS6.8AI score0.0119EPSS
SaveExploits0References2
NVD
NVD
added 2019/05/03 1:29 p.m.31 views

CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS5.6AI score0.0119EPSS
SaveExploits0References1
Prion
Prion
added 2019/05/03 1:29 p.m.15 views

Design/Logic Flaw

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

4.3CVSS5.6AI score0.0119EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/05/03 1:29 p.m.30 views

CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS7.1AI score
SaveExploits0References1
OSV
OSV
added 2019/05/03 1:29 p.m.11 views

UBUNTU-CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS6.7AI score0.0119EPSS
SaveExploits0References3
Rows per page
Query Builder