Lucene search
+L

473 matches found

Tenable Nessus
Tenable Nessus
added 2022/05/12 12:00 a.m.92 views

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5418-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5418-1 advisory. Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre...

8.8CVSS7.3AI score0.02093EPSS
SaveExploits1References14
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:00 a.m.14 views

The vulnerability of the driver for Xilinx USB devices (drivers/usb/gadget/udc/udc-xilinx.c) in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the driver for Xilinx USB devices drivers/usb/gadget/udc/udc-xilinx.c in Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.2AI score0.02093EPSS
SaveExploits0References29Affected Software4
CNNVD
CNNVD
added 2022/04/27 12:00 a.m.12 views

Xilinx Zynq-7000 安全漏洞

The Xilinx Zynq-7000 is a chip from Xilinx, Inc. It provides the software programmability of an ARM® architecture processor with the hardware programmability of an FPGA, enabling critical analysis and hardware acceleration while integrating CPU, DSP, ASSP, and hybrid signaling capabilities on a...

6.8CVSS6.8AI score0.0026EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/24 10:12 p.m.17 views

GSD-2022-1002112 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/24 9:25 p.m.16 views

GSD-2022-1001577 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/24 9:00 p.m.19 views

GSD-2022-1001270 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
SaveExploits0
Ubuntu
Ubuntu
added 2022/04/20 7:09 p.m.165 views

USN-5381-1: Linux kernel (OEM) vulnerabilities

David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 It was discovered that the block layer subsystem in the...

8.8CVSS7.2AI score0.02093EPSS
SaveExploits13
OSV
OSV
added 2022/04/16 11:04 a.m.10 views

OESA-2022-1614 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.CVE-2022-26966 In...

8.8CVSS6.3AI score0.02093EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2022/03/23 7:00 a.m.7 views

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12 the endpoint index is not validated and might be manipulated by the host for out-of-array access.

...

8.8CVSS7.2AI score0.02093EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/16 12:15 a.m.6 views

CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

8.8CVSS5.9AI score0.02093EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/16 12:15 a.m.15 views

AZL-9067 CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

8.8CVSS6.7AI score0.02093EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/16 12:15 a.m.4 views

DEBIAN-CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

8.8CVSS6.6AI score0.02093EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/16 12:15 a.m.15 views

UBUNTU-CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

8.8CVSS6.7AI score0.02093EPSS
SaveExploits0References10
Prion
Prion
added 2022/03/16 12:15 a.m.33 views

Design/Logic Flaw

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

6.5CVSS8.2AI score0.02093EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2022/02/24 12:00 a.m.44 views

PT-2022-2366 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.12 Description: The issue is related to the Linux kernel's USB gadget driver, specifically in the udc-xilinx.c file. It involves an array index that is not properly validated, potentially allowing a remote...

10CVSS7.5AI score0.67994EPSS
SaveExploits199References1110
NVD
NVD
added 2022/02/10 7:15 p.m.22 views

CVE-2021-44850

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

6.8CVSS0.00186EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/10 7:15 p.m.11 views

CVE-2021-44850

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

6.8CVSS7AI score0.00186EPSS
SaveExploits0References3
Prion
Prion
added 2022/02/10 7:15 p.m.32 views

Buffer overflow

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

4.6CVSS6.8AI score0.00186EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/02/10 6:19 p.m.31 views

CVE-2021-44850

On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's boot image header is unencrypted and unauthenticated before use, an attacker can modify the boot header stored on an SD card so that a secure image...

7AI score0.00186EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/10 6:19 p.m.98 views

CVE-2021-44850

The CVE covers Xilinx Zynq-7000 SoC, where physical modification of an SD boot image enables a ROM buffer overflow. The boot image header is unencrypted/unauthenticated pre-use, allowing an attacker to modify the SD card’s boot header so a secure image appears unencrypted and register initializat...

6.8CVSS6.8AI score0.00186EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder