Intel Iris Xe 安全漏洞

Intel Iris Xe is a display chip integrated inside the central processor from Intel Corporation USA. A security vulnerability exists in Intel Iris Xe MAX drivers versions prior to 100.0.5.1436 v2. An attacker could exploit this vulnerability to cause a denial of service on the system...

PT-2023-13011 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1474 Description: The issue is an out-of-bounds read that may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versio...

PT-2023-13427 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1436v2 Description: The issue is related to an uncaught exception in the IntelR IrisR Xe MAX drivers for Windows, which may allow a privileged user to potentially enable denial...

SUSE CVE-2017-10972

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server...

The vulnerability of Cisco IOS XE’s operating system in authentication, authorization, and accounting services allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of Cisco IOS XE’s authentication, authorization, and accounting AAA services arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Intel® Iris® Xe MAX Advisory

Summary: Potential security vulnerabilities in the Intel® Iris® Xe MAX drivers for Windows may allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-30531 Description: Out-of-bound...

Cisco IOS XE Software IOx Application Hosting Environment Command Injection (cisco-sa-iox-8whGn5dL)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an...

Vulnerability fixed in Cisco IOS XE

Cisco has fixed a vulnerability in IOS XE. A authenticated malicious person could exploit the vulnerability to execute arbitrary code as root on the underlying operating system and thus effectively take over the vulnerable system take over. However, abuse is not easy and requires prior knowledge ...

The vulnerability relates to the implementation of the Control and Provisioning of Wireless Access Points protocol (CAPWAP) in Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers. It stems from insufficient resource management during their existence, allowing attackers to trigger service interruptions.

The vulnerability of the CAPWAP protocol implementation for Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers is related to insufficient resource management during their existence. Exploiting this vulnerability could allow a...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.

The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...

Cisco IOS XE Software Rate Limiting Network Address Translation DoS (cisco-sa-ratenat-pYVLA7wM) Unpatched Commands

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Rate Limiting Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco...

Cisco IOS XE Software Rate Limiting Network Address Translation DoS (cisco-sa-ratenat-pYVLA7wM)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Rate Limiting Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco...

Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure DoS (cisco-sa-iosxe-rpki-dos-2EgCNeKE)

According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service DoS vulnerability that exists in its implementation of the Public Key Infrastructure RPKI feature due to the incorrect handling of a specific RPKI to Router RTR Protocol packet header. An...

Cisco IOS XE Software for cBR 8 Converged Broadband Routers Common Open Policy Service Denial of Service (cisco-sa-cbr8-cops-Vc2ZsJSx)

According to its self-reported version, Cisco IOS-XE Software for Cisco cBR-8 Converged Broadband Routers is affected by a DoS vulnerability in the Common Open Policy Service COPS. A deadlock condition exists in the COPS packet processing that could allow allow an unauthenticated, remote attacker...

PT-2022-7009 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Authentication, Authorization, and Accounting AAA feature could allow an authenticated, remote attacker to bypass command...

Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure (cisco-sa-iosxe-info-disc-nrORXjO)

According to its self-reported version, Cisco IOS XE ROM Monitor Software for Catalyst Switches is affected by an information disclosure vulnerability. A problem with file and boot variable permissions in the ROMMON password-recovery disable feature of Cisco IOS XE ROM Monitor ROMMON Software cou...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family CAPWAP Mobility DoS (cisco-sa-c9800-mob-dos-342YAc6J)

A vulnerability in the processing of Control and Provisioning of Wireless Access Points CAPWAP Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family SNMP Information Disclosure (cisco-sa-cwlc-snmpidv-rnyyQzUZ)

According to its self-reported version, Cisco IOS-XE Software is affected by an information disclosure vulnerability. Due to insufficient restrictions in the implementation of the simple network management protocol, a remote, authenticated attacker could retrieve service set identifier SSID...

Cisco IOS XE Software IPv6 VPN over MPLS DoS (cisco-sa-iosxe-6vpe-dos-tJBtf5Zv)

A vulnerability in the implementation of IPv6 VPN over MPLS 6VPE with Zone-Based Firewall ZBFW of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to improper error handling of an IPv6...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-webui-cmdinj-Gje47EMn)

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...