ASB-A-179338675

In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...

GSD-2021-1002314 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002314 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002282 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

GSD-2021-1002282 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002260 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

UVI-2021-1002248 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

GSD-2021-1002248 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

GSD-2021-1002237 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.256 by commit...

PT-2021-30702

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.256 Description A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versi...

PT-2021-26730

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.12 through 5.4.161 Description: A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-30779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30747

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.12 through v5.10.81 Description A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-30713

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.218 Description A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versi...

PT-2021-30725

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.4.161 Description A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26707

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.256 Description: A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-26718

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.218 Description: A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-26752

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.82 Description: A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-26784

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.12 through v5.15.4 Description: A potential security issue exists due to a NULL pointer dereference on VSI filter sync. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

OESA-2021-1434 gfbgraph security update

GLib/GObject wrapper for the Facebook Graph API. Security Fixes: In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to...