PT-2023-9440 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the iommu/arm-smmu-v3 component in the Linux kernel. It is caused by the driver calling iommu device unregister from the shutdown path, which removes the IOMMU...

Design/Logic Flaw

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

CVE-2022-39184

CVE-2022-39184 affects EXFO BV-10 Performance Endpoint Unit. The vulnerability is an authentication bypass where a user can manually manipulate access to enable bypass. Documented impact is high ( Confidentiality/Integrity/Availability = High) with CVSS 3.1 base score 9.8. Connected sources confi...

PT-2023-13709 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO - BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns a misconfiguration in the EXFO - BV-10 Performance Endpoint Unit, specifically with the system configuration file having misconfigured...

PT-2023-13708 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns an undocumented hard-coded privileged user in the EXFO BV-10 Performance Endpoint Unit. This means that there is a user account with elevated...

CVE-2022-39185 EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39184 EXFO - BV-10 Performance Endpoint Unit Authentication bypass

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39186

CVE-2022-39186 affects EXFO BV-10 Performance Endpoint Unit. The root cause is a misconfigured permissions setting on the system configuration file, as reported by multiple sources (NVD, CNNVD). Potential impact includes high confidentiality exposure, with local attack vector and low attack compl...

PT-2023-13707 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue allows a user to manually manipulate access, enabling an authentication bypass. This means that an individual can potentially gain unauthorized access...

CVE-2022-39186 EXFO - BV-10 Performance Endpoint Unit Misconfiguration

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

CVE-2022-39184: Improper Authentication

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39185: Use of Hard-coded Credentials

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39186: Incorrect Permission Assignment for Critical Resource

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

systemd:fuzz-unit-file: Heap-double-free in open_file_parse

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6406146447769600 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-unit-file Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000000560...

CVE-2023-20531

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service...

CVE-2023-20528

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2023-20529

Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service...

CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

CVE-2021-26355

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

Authorization

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...