a400_firmware Archives - CVE Vulnerability

CVE-2020-29660

Sun, 26 Feb 2023 06:41:00 +0000

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

The post CVE-2020-29660 appeared first on CVE Vulnerability.

CVE-2020-15025

Sun, 26 Feb 2023 06:37:39 +0000

ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.

The post CVE-2020-15025 appeared first on CVE Vulnerability.

CVE-2019-5108

Sun, 26 Feb 2023 06:33:33 +0000

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.

The post CVE-2019-5108 appeared first on CVE Vulnerability.

CVE-2019-20095

Sun, 26 Feb 2023 06:32:18 +0000

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.

The post CVE-2019-20095 appeared first on CVE Vulnerability.

CVE-2019-20054

Sun, 26 Feb 2023 06:32:17 +0000

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

The post CVE-2019-20054 appeared first on CVE Vulnerability.

CVE-2019-19965

Sun, 26 Feb 2023 06:32:16 +0000

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

The post CVE-2019-19965 appeared first on CVE Vulnerability.

CVE-2019-18683

Sun, 26 Feb 2023 06:31:50 +0000

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.

The post CVE-2019-18683 appeared first on CVE Vulnerability.

CVE-2019-18282

Sun, 26 Feb 2023 06:31:43 +0000

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.

The post CVE-2019-18282 appeared first on CVE Vulnerability.

CVE-2022-30594

godfreyd94 — Thu, 23 Feb 2023 05:18:40 +0000

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

The post CVE-2022-30594 appeared first on CVE Vulnerability.