a700s_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/a700s_firmware/ Sun, 26 Feb 2023 06:41:18 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png a700s_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/a700s_firmware/ 32 32 CVE-2020-35508 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35508/ Sun, 26 Feb 2023 06:41:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35508/ A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

The post CVE-2020-35508 appeared first on CVE Vulnerability.

]]> A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

The post CVE-2020-35508 appeared first on CVE Vulnerability.

]]> CVE-2020-29661 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-29661/ Sun, 26 Feb 2023 06:41:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-29661/ A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

The post CVE-2020-29661 appeared first on CVE Vulnerability.

]]> A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

The post CVE-2020-29661 appeared first on CVE Vulnerability.

]]> CVE-2020-15778 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15778/ Sun, 26 Feb 2023 06:37:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15778/ ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of “anomalous argument transfers” because that could “stand a great chance of breaking existing workflows.”

The post CVE-2020-15778 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of “anomalous argument transfers” because that could “stand a great chance of breaking existing workflows.”

The post CVE-2020-15778 appeared first on CVE Vulnerability.

]]> CVE-2020-13143 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13143/ Sun, 26 Feb 2023 06:36:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13143/ gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal ” value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.

The post CVE-2020-13143 appeared first on CVE Vulnerability.

]]> gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal ” value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.

The post CVE-2020-13143 appeared first on CVE Vulnerability.

]]> CVE-2020-12888 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12888/ Sun, 26 Feb 2023 06:36:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12888/ The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

The post CVE-2020-12888 appeared first on CVE Vulnerability.

]]> The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

The post CVE-2020-12888 appeared first on CVE Vulnerability.

]]> CVE-2020-12770 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12770/ Sun, 26 Feb 2023 06:36:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12770/ An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.

The post CVE-2020-12770 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.

The post CVE-2020-12770 appeared first on CVE Vulnerability.

]]> CVE-2019-3846 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3846/ Sun, 26 Feb 2023 06:33:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3846/ A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

The post CVE-2019-3846 appeared first on CVE Vulnerability.

]]> A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

The post CVE-2019-3846 appeared first on CVE Vulnerability.

]]> CVE-2019-10126 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10126/ Sun, 26 Feb 2023 06:29:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10126/ A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.

The post CVE-2019-10126 appeared first on CVE Vulnerability.

]]> A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.

The post CVE-2019-10126 appeared first on CVE Vulnerability.

]]> CVE-2021-4203 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4203/ Thu, 23 Feb 2023 14:12:09 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4203/ A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

The post CVE-2021-4203 appeared first on CVE Vulnerability.

]]> A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

The post CVE-2021-4203 appeared first on CVE Vulnerability.

]]>