Lucene search
+L

691 matches found

The Hacker News
The Hacker News
added 2024/06/21 1:1 p.m.41 views

Military-themed Email Scam Spreads Malware to Infect Pakistani Users

Cybersecurity researchers have shed light on a new phishing campaign that has been identified as targeting people in Pakistan using a custom backdoor. Dubbed PHANTOMSPIKE by Securonix, the unknown threat actors behind the activity have leveraged military-related phishing documents to activate the...

7.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2024/06/10 11:8 a.m.13 views

Exploiting Mistyped URLs

Interesting research: "Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains": Abstract: Web users often follow hyperlinks hastily, expecting them to be correctly programmed. However, it is possible those links contain typos or other mistakes. By discovering active but erroneous...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/03/20 8:28 p.m.46 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.5CVSS6.8AI score0.00805EPSS
SaveExploits0References4
NVD
NVD
added 2024/03/20 11:15 a.m.21 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS3.8AI score0.00805EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/20 11:15 a.m.2 views

DEBIAN-CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS5.5AI score0.00805EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/20 11:15 a.m.6 views

ALPINE-CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS6.9AI score0.00805EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/20 11:15 a.m.35 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS7.1AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/03/20 11:15 a.m.31 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS6.1AI score0.00805EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/20 11:15 a.m.8 views

UBUNTU-CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS5.8AI score0.00805EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/20 10:35 a.m.53 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.5AI score0.00805EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/20 10:35 a.m.127 views

CVE-2023-46839

CVE-2023-46839 concerns PCI devices using phantom functions that can generate requests with IDs of unpopulated functions. The underlying issue is that phantom functions require an IOMMU context; failure to set up that context is not fatal when the device is assigned, which can allow the primary d...

5.3CVSS4.5AI score0.00805EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/20 10:35 a.m.22 views

CVE-2023-46839 pci: phantom functions assigned to incorrect contexts

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

7.1AI score0.00805EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/03/20 10:35 a.m.80 views

CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

5.3CVSS4.2AI score0.00805EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.21 views

openSUSE: Security Advisory for xen (SUSE-SU-2024:0268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.00805EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/15 12:0 a.m.34 views

Fedora 38 : xen (2024-4b2cf8c375)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4b2cf8c375 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

5.3CVSS5.2AI score0.00805EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/02/15 12:0 a.m.34 views

Fedora 39 : xen (2024-e527e6fd08)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e527e6fd08 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

5.3CVSS5.2AI score0.00805EPSS
SaveExploits0References4
Veracode
Veracode
added 2024/02/06 4:43 p.m.24 views

Misassignment Of Phantom Functions

xen is vulnerable to Misassignment of Phantom Functions. The vulnerability is due to the failure to properly handle the assignment of phantom functions when the IOMMU context setup fails. It allows attackers in the primary device being assigned to a guest while some phantom functions are assigned...

5.3CVSS7AI score0.00805EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.8 views

The vulnerability of the phantom() function in Xen hypervisors allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the phantom function in Xen hypervisors is related to deficiencies in access control due to incorrect validation of input data during query generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.1CVSS5.9AI score0.00805EPSS
SaveExploits0References11Affected Software4
SUSE CVE
SUSE CVE
added 2024/01/31 2:55 a.m.6 views

SUSE CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context...

4.1CVSS5.4AI score0.00805EPSS
SaveExploits0References10
OSV
OSV
added 2024/01/30 1:20 p.m.7 views

SUSE-SU-2024:0270-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851...

5.3CVSS5.4AI score0.00805EPSS
SaveExploits0References3
Rows per page
Query Builder