CVE-2020-16984

CVE-2020-16984 is an Azure Sphere unsigned code execution vulnerability affecting the Azure Sphere Linux-based OS. The root cause is the READ_IMPLIES_EXEC personality, which can cause PROT_READ pages to be treated as executable during memory operations (brk/mmap), potentially creating an executab...

CVE-2020-16984 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16982 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16982

CVE-2020-16982 (Azure Sphere) has a concrete advisory in TALOS-2020-1132 describing a privilege-escalation flaw in the Azure Sphere mtd character device driver. The issue arises from a write path (MEMWRITE) in the MTD subsystem that does not verify FMODE_WRITE, allowing an attacker with read acce...

CVE-2020-16970

CVE-2020-16970 is a Microsoft Azure Sphere vulnerability involving the AF_AZSPIO socket path. The Talos analysis describes a memory-corruption flaw in the AF_AZSPIO socket flow that can trigger a double-free and out-of-bounds read in the kernel, potentially allowing shellcode execution and/or a d...

CVE-2020-16970 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16987: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16984: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16982: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16970: Double Free

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16994: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16991: Undefined Security Weakness

Azure Sphere Unsigned Code Execution Vulnerability...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-3284

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...

CVE-2020-3284

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...

Design/Logic Flaw

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...