755 matches found
Realtek rtl8723de code issue vulnerability
Realtek rtl8723de is an interface controller from Realtek China. It is 802.11bgn 2.4G monolithic, integrated wireless LAN and network PCIe interface controller with integrated Bluetooth 5.0 USB interface controller. rtl8723de BLE Stack version 4.1 and prior versions have a code issue vulnerabilit...
Debian DLA-2420-2 : linux regression update
This update corrects a regression in some Xen virtual machine environments. For reference the original advisory text follows. Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information...
Debian DLA-2385-1 : linux-4.19 security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak. CVE-2019-3874 Kernel buffers allocated by the SCTP network protocol were not limited by the memory cgroup controller. A local user could potentially us...
CVE-2020-15687
Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...
Improper access control
Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...
CVE-2020-15687
Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...
CVE-2020-15687
The affected software is the ACRN Project Hypervisor (versions 2.0 and 1.6.1). The vulnerability arises from missing access control restrictions in the Hypervisor component, enabling a malicious entity with root access in the Service VM userspace to abuse PCIe assign/de-assign Hypercalls via craf...
CVE-2020-15687: Undefined Security Weakness
Missing access control restrictions in the Hypervisor component of the ACRN Project v2.0 and v1.6.1 allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and...
PT-2020-14584
Name of the Vulnerable Software and Affected Versions ACRN Project versions 1.6.1 through 2.0 Description The issue is related to missing access control restrictions in the Hypervisor component, allowing a malicious entity with root access in the Service VM userspace to abuse the PCIe...
Black Hat 2020: Satellite Comms Globally Open to $300 Eavesdropping Hack
Satellite internet communications are susceptible to eavesdropping and signal interception by far-flung attackers located in a different continent or country from their victims. And all they need is $300 worth of off-the-shelf equipment to pull it off. That’s the word from James Pavur, an academi...
PT-2020-11589
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises from the function abc pcie issue dma xfer sync creating a transfer object, adding it to the session object, and then continuing to work with it. A concurrent thread could retrieve the created transfe...
kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS
Two memory leak flaws were found in the Linux kernel's mwifiexpcieinitevtring function. A local attacker, able to reload the kernel module or hotplug Marvell WiFi hardware using this driver, can cause a denial of service memory consumption by triggering mwifiexmappcimemory failures...
kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c
A flaw was found in the Linux kernel. A check was not done on the allocworkqueue return value of the iwltranspciealloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system...
kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS
A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system...
CVE-2019-15034
A buffer overflow flaw was found in the way the Bochs display driver of QEMU handled the PCIe extended configuration space when the device is connected to a PCIe bus. Accessing the PCIe extended config space could overflow the conventional PCI config space buffer due to limited memory allocation...
Improper access control
Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2019-14626
Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2019-14626: Undefined Security Weakness
Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...
