CVE-2021-36925

CVE-2021-36925 details (normal mode) Realtek RtsUpx.sys, the USB Utility Driver for Camera/Hub/Audio, up to version 1.14.0.0 is affected. The vulnerability allows local, low-privileged users to perform arbitrary reads/writes in physical memory via a crafted IOCTL to the device, leading to potenti...

CVE-2021-36925

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a...

CVE-2021-36923

Summary: CVE-2021-36923 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) up to version 1.14.0.0. The root cause is an access-control/IOCTL handling flaw that permits local, low-privileged users to access privileged USB IN/OUT operations. This can enable escalation of privileges, den...

CVE-2021-36922

CVE-2021-36922 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) for Camera/Hub/Audio up to version 1.14.0.0. The root cause is failure to perform privilege checks on device IO control packets, enabling local, low-privilege users to gain unauthorized access to USB devices. Impact inc...

openscap bug fix and enhancement update

An update is available for openscap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSCAP suite enables integration of the Security Content Automation...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

PT-2021-21410

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions, leading to Escalation...

PT-2021-21412

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve arbitrary read or write operations from/to physical memory, leading to Escalation of...

PT-2021-21411

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve a pool overflow, leading to Escalation of Privileges, Denial of Service, and Code Execution...

PT-2021-21409

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve unauthorized access to USB devices, potentially leading to escalation of privileges, denial...

CVE-2021-36923: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosur...

CVE-2021-36922: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

CVE-2021-36924: Time-of-check Time-of-use (TOCTOU) Race Condition

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow leading to Escalation of Privileges, Denial of Service, and Code Execution via a crafted Device IO Control packet to a device...

Realtek RtsUpx USB Utility Driver Access Control Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which originates when the product allows arbitrary reads and writes from physical memory via a...

Realtek RtsUpx USB Utility Driver Access Control Vulnerability

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor Realtek, China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's failure to perform privilege checks on the device's IO...

CVE-2021-36925: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a...

CentOS 8 : java-11-openjdk (CESA-2021:3891)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3891 advisory. - OpenJDK: Weak ciphers preferred over stronger ones for TLS JSSE, 8264210 CVE-2021-35550 - OpenJDK: Excessive memory allocation in RTFParser Swing,...

Backdoor.Win32.Antilam.14.o Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/2914f01e65d848655d4f1aac51ff04d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.14.o Vulnerability: Unauthenticated Remote Command Execution Description: The...

CentOS 8 : java-1.8.0-openjdk (CESA-2021:3893)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3893 advisory. - OpenJDK: Weak ciphers preferred over stronger ones for TLS JSSE, 8264210 CVE-2021-35550 - OpenJDK: Excessive memory allocation in RTFParser Swing,...

dbus Avrora DoS

The vulnerability of the dbus utility in the “Avrora” operating system is related to the simultaneous, numerous accesses by an application to the hardware components. Exploiting this vulnerability allows a perpetrator to trigger a race condition and cause a service failure by running multiple...