PT-2022-28653

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.94 through v5.10.100 Description The issue is related to limiting I2C reads to I2C SMBUS BLOCK MAX in the ee1004 eeprom. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.17 through v5.15.23 Description The issue is related to the eeprom module, specifically the ee1004 component, where I2C reads are not properly limited to I2C SMBUS BLOCK MAX. This could potentially lead to security...

PT-2024-10520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ee1004 eeprom read function not properly limiting the number of bytes to read at once. Specifically, i2c smbus read i2c block data or emulated takes the lengt...

kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...

kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...

CVE-2017-18551

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2csmbusxferemulated...

DEBIAN-CVE-2017-18551

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2csmbusxferemulated...

CVE-2017-18551

An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2csmbusxferemulated...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4742)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4742 advisory. - ACPI: sbshc: remove raw pointer from printk message Greg Kroah-Hartman Orabug: 27987133 CVE-2018-5750 - dm: fix race between dmgetfromkobject and...

CVE-2018-3682

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

Code injection

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

CVE-2018-3682

CVE-2018-3682 affects Intel server BMC firmware on server boards, compute modules, and server systems. The vulnerability allows an attacker with administrative privileges to perform unauthorized read/write operations on the SMBUS, exposing confidentiality, integrity, and availability impacts. CVS...

CVE-2018-3682

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

PT-2018-16121

Name of the Vulnerable Software and Affected Versions BMC Firmware in Intel server boards, compute modules, and systems affected versions not specified Description The issue potentially allows an attacker with administrative privileges to make unauthorized read/writes to the SMBUS. Recommendation...

CVE-2018-3682: Improper Privilege Management

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

BMC Firmware Vulnerability Intel Server Boards, Compute Modules and Systems

Summary: BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS. • 8.2 High CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected products: Product Type | Product Name | MM...

Ubuntu 17.10 : linux, linux-raspi2 vulnerabilities (USN-3697-1)

It was discovered that a NULL pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2018-1130 Jann Horn discovered that the 32 bit adjtimex syscall implementation for 64 bit...

Ubuntu: Security Advisory (USN-3697-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel (OEM) vulnerabilities (USN-3697-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3697-2 advisory. It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could u...

USN-3698-1: Linux kernel vulnerabilities

It was discovered that the nested KVM implementation in the Linux kernel in some situations did not properly prevent second level guests from reading and writing the hardware CR8 register. A local attacker in a guest could use this to cause a denial of service system crash. CVE-2017-12154 Fan Wu,...