UBUNTU-CVE-2022-26361

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

PT-2022-17810 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns IOMMU: RMRR VT-d and unity map AMD-Vi handling problems. Certain PCI devices in a system might be assigned Reserved Memory Regions fo...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

多款Qualcomm产品配置错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. Qualcomm A misconfiguration vulnerability exists in multiple products,...

unit-xl.nl Improper Access Control vulnerability OBB-2442321

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Code Injection in Phpunit_Project Phpunit

PoC exploit for CVE-2017-9841, a remote code execution vulnerabi...

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker who controls the HTTP server to make the client script enter an infinite loop consuming CPU time. The highest threat from this vulnerability is to system availability.

...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google Inc. in the United States. Google Chrome suffers from a security vulnerability that originates from a heap buffer overflow in the GPU...

kernel: possible privileges escalation due to missing TLB flush

A random memory access flaw was found in the Linux kernel’s GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system...

CVE-2022-21819

NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an attack could result in denial of...

CVE-2022-20049

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

MediaTek 多款产品安全漏洞

MediaTek Mt Series is a series of smartphone chips from China's MediaTek. A security vulnerability exists in several MediaTek products, which stems from a lack of privilege checking in the vpu, and may lead to privilege escalation. The following products and versions are affected:...

PT-2022-13468

Name of the Vulnerable Software and Affected Versions PyTorch Lightning versions prior to 1.6.0 Description The issue allows for code injection, potentially enabling an attacker to execute commands on the target operating system. This can be achieved by setting the PL TRAINER GPUS variable when...

ARM Mali GPU 缓冲区错误漏洞

ARM Mali GPUs are a family of mobile display chipsets GPUs from the British company ARM. Like other 3D display chips based on IP cores embedded technology, the Mali display chipset does not provide a display controller similar to a graphics card specifically designed to drive an LCD monitor to...

Google Chrome GPU Code Execution

The vulnerability of Google Chrome’s GPU component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

fr.jetoile.hadoop:hadoop-unit-client-alluxio (>=2.10, <=3.8), org.alluxio:alluxio-assembly-client (1.8.1) +20 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.8.1)

org.alluxio:alluxio-core-common MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - fr.jetoile.hadoop:hadoop-unit-client-alluxio =2.10, =3.8 - org.alluxio:alluxio-assembly-client...

Justice Department Appoints First Director of National Cryptocurrency Enforcement Team

The U.S. Department of Justice DoJ earlier this week appointed Eun Young Choi to serve as the first Director of the National Cryptocurrency Enforcement Team NCET it established last year. The NCET was created to tackle the criminal misuse of cryptocurrencies and digital assets," with a focus on...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome GPU, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...

me.prettyprint:hector-test (>=1.0-2, <=1.0-4), org.cassandraunit:cassandra-unit (1.0.3.1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.0.6)

org.apache.cassandra:cassandra-all MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-test =1.0-2, =1.0-4 - org.cassandraunit:cassandra-unit 1.0.3.1 Source...

org.cassandraunit:cassandra-unit (0.8.0.3.1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.8.7)

org.apache.cassandra:cassandra-all MAVEN version 0.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - org.cassandraunit:cassandra-unit 0.8.0.3.1 Source cves: CVE-2021-44521 Source advisory:...