kernel: ath11k: mhi: use mhi_sync_power_up()

In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhisyncpowerup If amss.bin was missing ath11k would crash during 'rmmod ath11kpci'. The reason for that was that we were using mhiasyncpowerup which does not check any errors. But mhisyncpowerup on the other hand...

ERROR : Dotmim.Sync.SyncException: SQLite Error 14: 'unable to open database file'.

On Broker machine event viewer : Dotmim.Sync.SyncException: SQLite Error 14: 'unable to open database file'. --- Microsoft.Data.Sqlite.SqliteException: SQLite Error 14: 'unable to open database file'. à Microsoft.Data.Sqlite.SqliteException.ThrowExceptionForRCInt32 rc, sqlite3 db à...

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

CVE-2022-22219

Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS and Junos OS Evolved, an attacker in direct control of a BGP client connected to a route reflector, or via a machine in the middle MITM attack, can send a specific EVPN route...

The vulnerability of the SNDCTL_DSP_SYNC ioctl function in the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the SNDCTLDSPSYNC ioctl function in the Linux kernel’s audio subsystem is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system resulting in a denial of service condition

...

Improper beacon events in matrix-js-sdk can result in availability issues

Impact Improperly formed beacon events from MSC3488 can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data...

Korean keyboard (101 key) Type 2 & 3 cannot be synced using “Sync only once” mode.

For Windows 10/11 as VDA, CWA Windows client machine uses Microsoft Korean IME with the Korean keyboard 101 key Type 2, or Type 3. The Citrix Workspace keyboard sync mode is configured as “Sync only once” in the Keyboard and Language Bar setting. Starting the Windows 10/11 Desktop/APP session, th...

UBUNTU-CVE-2022-39236

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...

AZL-11048 CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTLDSPSYNC ioctl. A privileged local user root or member of the audio group could use this flaw to crash the system, resulting in a denial...

DEBIAN-CVE-2022-3303

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTLDSPSYNC ioctl. A privileged local user root or member of the audio group could use this flaw to crash the system, resulting in a denial...

OESA-2022-1937 gfbgraph security update

GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME Online Accounts. Security Fixes: In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks...

Seagate Media Sync Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Seagate Media Sync, a file synchronization tool, due to a failure in the Seagate Media Sync software to properly handle the transfer of data between its two processes via the named pipe MEDIAAGGREPIPE.PIP and the ability to create registry values...

Azure File Sync Agent v15.1 Release – September 2022 (KB5003883)

Update for Azure File Sync agent version 15.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v15.1 Release – September 2022 (KB5003883)

Update for Azure File Sync agent version 15.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v15.1 Release – September 2022 (KB5003883)

Update for Azure File Sync agent version 15.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v15.1 Release – September 2022 (KB5003883)

Update for Azure File Sync agent version 15.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Apple puts the password on life support with passkey

The "passwordless future" is something many internet users--and a great majority of the cybersecurity industry--have hoped for. Now Apple is about to make those hopes a reality. With the release of iOS 16 yesterday, and macOS Ventura next month, Apple fans will be able to use passkeys, its passwo...

Reserves are not updated correctly

Lines of code Vulnerability details Impact Reserves are not updated on calling transfer function when dst is contract itself. This will lead to incorrect calculation of reserve0CumulativeLast and reserve1CumulativeLast which impacts the outcome prices returned by contract Proof of Concept 1. User...