Oracle Linux 8 : kernel (ELSA-2023-0101)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0101 advisory. - drm/i915: fix TLB invalidation for Gen12 video and compute engines Wander Lairson Costa 2148149 2148150 CVE-2022-4139 - net: usb: ax88179178a: Fix...

kernel: memory corruption in AX88179_178A based USB ethernet device.

A flaw was found in the Linux kernel’s driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes...

RHEL 8 : kernel-rt (RHSA-2023:0114)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0114 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : kernel (RHSA-2023:0101)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0101 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: memory corruption in AX8817917...

Adobe Dimension < 3.4.7 Multiple Memory leak (APSB23-10)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-10 advisory. - Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

CVE-2021-46768

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service...

CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

Input validation

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service...

Input validation

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

AMD Secure Encrypted Virtualization 缓冲区错误漏洞

AMD Secure Encrypted Virtualization is a software application from UltraMicroelectronics AMD. Hardware-accelerated memory encryption to protect data in use. AMD Secure Encrypted Virtualization SEV suffers from a buffer error vulnerability that stems from insufficient validation of input. An...

CVE-2023-20530

CVE-2023-20530 concerns the AMD System Management Unit (SMU) on AMD EPYC-based platforms. It involves insufficient input validation of BIOS mailbox messages in SMU, which can cause out-of-bounds memory reads and potentially lead to a denial of service. Public sources consistently describe the aff...

CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

CVE-2021-46768

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service...

CVE-2021-46768

Summary (CVE-2021-46768) : The issue is insufficient input validation in AMD SEV firmware affecting the ASP boot loader, allowing out-of-bounds memory reads and potentially causing a denial of service. Documents consistently describe this as a vulnerability in SEV firmware with the ASP boot loade...

CVE-2021-46768

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service...

PT-2023-1405 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description: The issue is related to insufficient input validation in the SEV firmware, which may allow an attacker to perform out-of-bounds memory reads within...

PT-2023-1366 · Amd · Amd Bios

Name of the Vulnerable Software and Affected Versions: AMD BIOS affected versions not specified Description: The issue is related to insufficient input validation of BIOS mailbox messages in SMU, which may result in out-of-bounds memory reads, potentially leading to a denial of service. This can ...

xorg-x11-server: XIChangeProperty out-of-bounds access

A vulnerability was found in X.Org. The issue occurs because the handler for the XIChangeProperty request has a length-validation issue, resulting in out-of-bounds memory reads and potential information disclosure. This flaw can lead to local privilege elevation on systems where the X server runs...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2023-1128)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking in meta wifi, which may result in out-of-bounds reads, which could lead to local privilege escalation...