RHEL 9 : linux-firmware (RHSA-2023:6595)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6595 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel:...

[SECURITY] [DLA 3596-1] firmware-nonfree security update

Debian LTS Advisory DLA-3596-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 30, 2023 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114+really20220913-0+deb10u2 CVE ID : CVE-2022-27635 CVE-2022-36351 CVE-2022-38076 CVE-2022-40964...

Fedora 37 : linux-firmware (2023-defb0a89ff)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-defb0a89ff advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

Fedora 38 : linux-firmware (2023-4056a5c165)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4056a5c165 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

CVE-2022-38076

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an authenticated user to enable escalation of privilege via local access. Mitigation Mitigation for this issue is either not available or the currently available options don't...

CVE-2022-36351

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access. Mitigation Mitigation for this issue is either not available or the currently available options don'...

CVE-2022-46329

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criter...

Oracle Linux 7 : qt5-qtbase (ELSA-2020-4025)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4025 advisory. 5.9.7-4 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814740 Resolves: bz181468...

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools, related to bypassing authentication by using a password, allows attackers to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools relates to bypassing authentication by using a password. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Intel PROSet/Wireless WiFi and Killer Wi-Fi connection tools, related to insufficient validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Intel PROSet/Wireless WiFi and Killer Wi-Fi connection tools, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi and Killer WiFi networking tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel PROSet/Wireless WiFi network connection tool for Windows allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool for Windows is related to access control deficiencies. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2023-28714

Improper access control in firmware for some IntelR PROSet/Wireless WiFi software for Windows before version 22.220 HF Hot Fix may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-46329

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2022-46329

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-46329

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2022-40964

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-40964

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-40964

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...