NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0266)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - The bnepsockioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a...

UBUNTU-CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

CVE-2019-18808

A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate this issue it is possible ...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E7 v4, and Intel Atom processor C allow attackers to enhance their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability of microprogrammed software for Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E7 v4, and Intel Atom processor C is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03580)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in the Multi-mode Call processor in multiple...

CVE-2019-0165

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-2274

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

Improper access control

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

CVE-2019-2274

CVE-2019-2274 describes an Improper Access Control issue for RPU write access from the secure processor in Qualcomm-supplied Snapdragon platforms (Auto, Compute, CE Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wired Infrastructure/Networking). Affected families include APQ80...

CVE-2019-2274

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking ...

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the ReadXBMImage function in the cross-platform library for working with GraphicsMagick is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Intel® Processor Diagnostic Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostic Tool may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11133...

Security Bulletin: IBM System Planning Tool for POWER processor-based systems (TESTING NOTIFICATION)

Summary IBM System Planning Tool for POWER processor-based systems Vulnerability Details Overview Download Releases Support Current version IBM System Planning Tool - Version 6.18.047.0 EXE, 192MB Important note for Symantec Endpoint Protection Users: In order to avoid problems with the download ...

Hackers Can Mess With Voltages to Steal Intel Chips' Secrets

A new attack called Plundervolt gives attackers access to the sensitive data stored in a processor's secure enclave...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

CVE-2019-19587

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-16058)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9650 is a central processing unit CPU product. A resource management error vulnerability exists in DSP Services in multiple Qualco...

USN-4182-3: Intel Microcode regression

USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...