PT-2019-3840

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in the IntelR AMT subsystem...

PT-2019-4272

Name of the Vulnerable Software and Affected Versions IntelR SGX SDK versions affected versions not specified Description The issue is related to insufficient input validation in the IntelR SGX SDK, which may allow an authenticated user to enable information disclosure, escalation of privilege, o...

PT-2019-4000

Name of the Vulnerable Software and Affected Versions IntelR 6th Generation Core Processors and greater, supporting SGX Description The issue is related to insufficient memory protection in Intel processors, specifically those supporting Software Guard eXtensions SGX technology. This could allow ...

PT-2019-4270

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to a buffer overflow in the firmware of IntelR Ethernet 700 Series Controllers. This may allow an unauthenticated user, with adjacent access, to...

PT-2019-3988

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software extension DLL versions prior to 21.40 Description The issue is related to memory corruption in the IntelR PROSet/Wireless WiFi Software extension DLL. It may allow an authenticated user to potentially enabl...

FlexAir Access Control 2.3.38 Command Injection

!/bin/bash Command injection with root privileges in FlexAir Access Control Prima Systems Firmware version: $OUTPUTFILE" Command injection payload. Be careful with single quotes! PAYLOAD="" Perform exploit echo "Executing: $CMD" curl --silent --output /dev/null -X POST -d "$PAYLOAD"...

PT-2019-4084

Name of the Vulnerable Software and Affected Versions IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families IntelR XeonR Processor E3-1500 v5, v6 Families IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics Description The issue is related to...

PT-2019-4058

Name of the Vulnerable Software and Affected Versions IntelR PTT versions prior to 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, and 14.0.10 IntelR TXE versions prior to 3.1.70 and 4.0.20 IntelR SPS versions prior to SPS E5 04.01.04.305.0, SPS SoC-X 04.00.04.108.0, SPS SoC-A 04.00.04.191.0, SPS E...

PT-2019-3992

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software versions prior to 21.40 Description The issue is related to improper directory permissions in the IntelR PROSet/Wireless WiFi Software, which may allow an authenticated user to potentially enable denial of...

PT-2019-4057

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in a subsystem, which may...

PT-2019-3990

Name of the Vulnerable Software and Affected Versions IntelR WIFI Drivers versions prior to 21.40 Description The issue is related to memory corruption in IntelR WIFI Drivers, which may allow a privileged user to enable escalation of privilege, denial of service, and information disclosure via...

PT-2019-4051

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 12.0.45 IntelR CSME versions prior to 13.0.10 IntelR CSME versions prior to 14.0.10 Description The issue is related to a logic problem in the IntelR CSME subsystem, which may allow a privileged user to potentiall...

PT-2019-4434

Name of the Vulnerable Software and Affected Versions IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families IntelR XeonR Processor E3-1500 v5 and v6 Families IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT Description The...

PT-2019-4034

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions before 7.0 Description The issue is related to unhandled exceptions in Kernel-mode drivers, potentially allowing an authenticated user to enable a denial of service via local access. It is also...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

Design/Logic Flaw

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

PYSEC-2019-196

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

CVE-2019-12410: Missing Initialization of Resource

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

PT-2019-12790

Name of the Vulnerable Software and Affected Versions Apache Arrow versions 0.14.0 through 0.14.1 Description A bug was found in the C++ implementation of Apache Arrow, which also affects the R, Python, and Ruby implementations. This bug occurs when building arrays with null values, resulting in ...