Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2021:1648-1
HistoryDec 31, 2021 - 12:00 a.m.

Security update for kernel-firmware (low)

2021-12-3100:00:00
lists.opensuse.org
176

3.1 Low

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

JSON

An update that fixes one vulnerability is now available.

Description:

This update for kernel-firmware fixes the following issues:

  • CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug (bsc#1167162).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2021-1648=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2noarch< - openSUSE Leap 15.2 (noarch):- openSUSE Leap 15.2 (noarch):.noarch.rpm

Related

fortinet 1
ics 1
openvas 16
thn 1
githubexploit 4
hp 1
mageia 2
trendmicroblog 1
packetstorm 1
schneier 1
huawei 1
threatpost 1
exploitpack 1
kitploit 1
cisco 1
zdt 1
kaspersky 1
mscve 1
exploitdb 1
cve 1
nessus 13
prion 1
redhatcve 1
attackerkb 1
avleonov 1
suse 1
apple 6
rapid7blog 1
fortinet
fortinet
Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips
2020-12-01 00:00:00
ics
ics
Siemens SIMATIC, SIMOTICS (Update A)
2020-12-08 12:00:00
openvas
openvas
Huawei Data Communication: Information Disclosure Vulnerability (huawei-sa-20200527-01-wifi-en, Kr00k)
2023-02-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4201-1)
2022-01-01 00:00:00
openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2021:1648-1)
2022-02-01 00:00:00
thn
thn
New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
2020-02-26 18:15:00
githubexploit
githubexploit
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-18 16:25:28
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-13 14:53:54
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-09 11:15:08
hp
hp
HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure
2020-09-15 00:00:00
mageia
mageia
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
trendmicroblog
trendmicroblog
This Week in Security News: Trend Micro Detects a 10 Percent Rise in Ransomware in 2019 and New Wi-Fi Encryption Vulnerability Affects Over a Billion Devices
2020-02-28 13:56:27
packetstorm
packetstorm
Broadcom Wi-Fi KR00K Proof Of Concept
2020-03-19 00:00:00
schneier
schneier
Wi-Fi Chip Vulnerability
2020-03-03 12:43:15
huawei
huawei
Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips
2020-05-27 00:00:00
threatpost
threatpost
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
2020-02-27 04:07:18
exploitpack
exploitpack
Broadcom Wi-Fi Devices - KR00K Information Disclosure
2020-03-18 00:00:00
kitploit
kitploit
R00Kie-Kr00Kie - PoC Exploit For The CVE-2019-15126 Kr00K Vulnerability
2020-03-30 20:30:00
cisco
cisco
Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability
2020-02-27 00:00:00
zdt
zdt
Broadcom Wi-Fi Devices - (KR00K) Information Disclosure Exploit
2020-03-19 00:00:00
kaspersky
kaspersky
KLA20228 OSI vulnerability in Microsoft Device
2023-02-14 00:00:00
mscve
mscve
MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device
2023-02-14 08:00:00
exploitdb
exploitdb
Broadcom Wi-Fi Devices - &#039;KR00K Information Disclosure
2020-03-18 00:00:00
cve
cve
CVE-2019-15126
2020-02-05 17:15:00
nessus
nessus
SUSE SLES12 Security Update : kernel-firmware (SUSE-SU-2021:4200-1)
2021-12-31 00:00:00
SUSE SLES12 Security Update : bcm43xx-firmware (SUSE-SU-2021:4003-1)
2021-12-14 00:00:00
SUSE SLED15 / SLES15 Security Update : kernel-firmware (SUSE-SU-2021:4201-1)
2021-12-31 00:00:00
prion
prion
Information disclosure
2020-02-05 17:15:00
redhatcve
redhatcve
CVE-2019-15126
2020-03-06 16:40:50
attackerkb
attackerkb
CVE-2019-15126 aka Kr00k
2020-02-05 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday February 2023: Win Graphics RCE, Edge RCE, Publisher SFB, CLFS EoP, Exchange RCEs, Word RCE, HoloLens1
2023-02-26 16:37:52
suse
suse
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
apple
apple
About the security content of iOS 13.2 and iPadOS 13.2 - Apple Support
2020-04-05 02:40:44
About the security content of iOS 13.2 and iPadOS 13.2
2019-10-28 00:00:00
About the security content of macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
2019-10-29 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - February 2023
2023-02-15 00:41:59

3.1 Low

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

JSON
Related for OPENSUSE-SU-2021:1648-1
fortinet1ics1openvas16thn1githubexploit4hp1mageia2trendmicroblog1packetstorm1schneier1huawei1threatpost1exploitpack1kitploit1cisco1zdt1kaspersky1mscve1exploitdb1cve1nessus13prion1redhatcve1attackerkb1avleonov1suse1apple6rapid7blog1