CVE-2023-40353

An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a crafted application...

CVE-2023-37377: Out-of-bounds Read

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor Exynos 980, Exynos 850, Exynos 2100, and Exynos W920. Improper handling of length parameter inconsistency can cause incorrect packet filtering...

CVE-2023-40353: Integer Overflow or Wraparound

An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a crafted application...

SAMSUNG Exynos Buffer Error Vulnerability

SAMSUNG Exynos is a SoC, Arm architecture-based processor developed and manufactured by Samsung Mobile, a South Korean company. A security vulnerability exists in the SAMSUNG Exynos Mobile Processor and Wearable Processor that stems from mishandling of length parameter inconsistencies, which can...

CVE-2023-40353

The CVE-2023-40353 issue affects Exynos Mobile Processor models 980 and 2100 where an integer overflow at a buffer index can prevent execution of requested services in a crafted app. Affected component: Exynos Mobile Processor firmware; root cause: integer overflow in buffer indexing. Impact: den...

CVE-2023-37377

CVE-2023-37377 affects Samsung Exynos Mobile Processor and Wearable Processor family (Exynos 980, 850, 2100, W920). The issue is improper handling of length parameter inconsistency that can lead to incorrect packet filtering. Public documents consistently describe the affected components and the ...

PT-2023-25937 · Samsung · Exynos 2100 +3

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Wearable Processor versions Exynos 980, Exynos 850, Exynos 2100, and Exynos W920 Description: An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor. Improper handling of length...

Oracle Linux 5 : ELSA-2012-0721-1: / kernel (ELSA-2012-07211)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-07211 advisory. - The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solar...

PT-2023-27409 · Samsung · Exynos Mobile Processor

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor versions 980 and 2100 Description: An issue was discovered in Exynos Mobile Processor, where an integer overflow at a buffer index can prevent the execution of requested services via a crafted application...

USN-6347-1: Linux kernel (Azure CVM) vulnerabilities

William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the NTFS file system...

USN-6342-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests CVE-2021-47391 A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...

The Bug Report – August 2023 Edition

The Bug Report – August 2023 Edition By Charles McFarland · September 06, 2023 Why am I here? Welcome back to The Bug Report, the hotter-than-hell Texas edition! For those still unfamiliar with our monthly escapades, every month our trusty Advanced Research Center vulnerability research team...

Medium: kernel

Issue Overview: A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. CVE-2023-20588 In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if deviceadd fails CVE-2023-53174 I...

PT-2023-24813 · Arm +1 · Arm +1

Name of the Vulnerable Software and Affected Versions: Arm affected versions not specified Description: The issue arises from the arithmetics in the cache cleaning and invalidation helpers provided by Arm, which can overflow and result in skipping the cache cleaning/invalidation. This means there...

OESA-2023-1554 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable...

Ubuntu: Security Advisory (USN-6332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6332-1: Linux kernel (Azure) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 William Zhao discovered that the Traffic Control T...

PT-2025-40237

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-70.22.1.el9 0.x86 64+debug Description The Linux kernel contains an issue within the qla2xxx SCSI driver. The problem stems from the use of smp processor id instead of raw smp processor id. This can lead t...