DEBIAN-CVE-2019-15117

parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access...

UBUNTU-CVE-2019-15117

parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access...

PT-2019-3103 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/helper.c motu microbookii driver of the Linux kernel. This can be caused by a malicious USB device. Exploitation of this iss...

PT-2019-13638 · Bc Vault · Bc Vault

Name of the Vulnerable Software and Affected Versions: BC Vault affected versions not specified Description: A side channel was discovered related to the row-based SSD1309 OLED display on BC Vault devices. The power consumption during each display cycle varies based on the number of illuminated...

PT-2019-13634 · Shapeshift · Keepkey

Name of the Vulnerable Software and Affected Versions: ShapeShift KeepKey devices affected versions not specified Description: A side channel vulnerability was discovered related to the row-based OLED display on ShapeShift KeepKey devices. The power consumption of each display cycle varies based ...

PT-2019-13632 · Trezor · Trezor One

Name of the Vulnerable Software and Affected Versions: Trezor One versions prior to 1.8.2 Description: A side channel was found in the row-based OLED display of Trezor One devices, allowing a partial recovery of display contents based on power consumption. This could potentially be exploited by a...

kernel: out-of-bounds in function build_audio_procunit in sound/usb/mixer.c

An out-of-bounds flaw was found in the ALSA usb-audio subsystem in the Linux kernel. An array boundary check was needed to restrict the array size; failing this can cause an out-of-bound access problem. Data confidentiality and integrity, as well as system availability, are all threats with this...

PT-2019-4477 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.10 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/hid/usbhid/hiddev.c driver. This bug can be triggered by a malicious USB device, potentially...

PT-2019-3108 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.3 Description: The issue is related to a NULL pointer dereference in the drivers/media/usb/zr364xx/zr364xx.c driver, caused by a malicious USB device. This can lead to a denial of service. Recommendations: F...

DEBIAN-CVE-2019-13631

In parsehidreportdescriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages...

The vulnerability in the implementation of the udc_pci_probe handler in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the udcpciprobe handler in the Linux kernel’s drivers/usb/gadget/udc/amd5536udc.ko module is related to the repeated memory release mechanism. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting an AMD5536 UDC device, which appears as a...

The vulnerability of the if_usb_probe handler in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ifusbprobe handler in the drivers/net/wireless/libertas/usb8xxx.ko module of the Linux kernel is related to a memory leak in the implementation. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a Marvell 8388 USB WLAN device. Thi...

CVE-2019-7229

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of...

PT-2019-3113 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a double-free error caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. This error can lead to a denial of service. Recommendations: For Linux...

PT-2019-3349 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/line6/driver.c driver, which can be caused by a malicious USB device. This can lead to a denial of service. Recommendations:...

kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow

The usbdestroyconfiguration function, in 'drivers/usb/core/config.c' in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, du...

PT-2019-3109 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.14 Description: The issue is related to a NULL pointer dereference in the drivers/usb/misc/yurex.c driver, caused by a malicious USB device. This can lead to a denial of service. Recommendations: For Linux...

CVE-2019-5518

VMware ESXi 6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001, Workstation 15.x before 15.0.4, 14.x before 14.1.7, Fusion 11.x before 11.0.3, 10.x before 10.1.6 contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI Universal Host...

XHCI for EDK2 Buffer Overflow Vulnerability

XHCI for EDK2 is a USB 3.0 controller support used in EDK2. A stack overflow vulnerability exists in XHCI for EDK2. A local attacker could exploit this vulnerability to cause a denial of service...

Intel USB 3.0 Creator Utility Privilege License and Access Control Vulnerability

Intel USB 3.0 Creator Utility is a tool for installing USB 3.0 drivers from Intel USA. A privilege-granting and access control vulnerability exists in the Intel USB 3.0 Creator Utility. An attacker could exploit the vulnerability to elevate privileges...