baseboard_management_controller_h700s_firmware Archives - CVE Vulnerability

CVE-2019-20388

Sun, 26 Feb 2023 06:32:23 +0000

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

The post CVE-2019-20388 appeared first on CVE Vulnerability.

CVE-2021-44733

Thu, 23 Feb 2023 14:12:45 +0000

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.

The post CVE-2021-44733 appeared first on CVE Vulnerability.

CVE-2021-3760

Thu, 23 Feb 2023 14:10:58 +0000

A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability.

The post CVE-2021-3760 appeared first on CVE Vulnerability.

CVE-2021-3743

Thu, 23 Feb 2023 14:10:56 +0000

An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

The post CVE-2021-3743 appeared first on CVE Vulnerability.

CVE-2021-3739

Thu, 23 Feb 2023 14:10:55 +0000

A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.

The post CVE-2021-3739 appeared first on CVE Vulnerability.

CVE-2021-20322

Thu, 23 Feb 2023 14:06:44 +0000

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

The post CVE-2021-20322 appeared first on CVE Vulnerability.

CVE-2022-25265

godfreyd94 — Thu, 23 Feb 2023 05:17:36 +0000

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.

The post CVE-2022-25265 appeared first on CVE Vulnerability.

CVE-2022-1353

Thu, 23 Feb 2023 05:02:05 +0000

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

The post CVE-2022-1353 appeared first on CVE Vulnerability.

CVE-2022-0995

Thu, 23 Feb 2023 05:02:00 +0000

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

The post CVE-2022-0995 appeared first on CVE Vulnerability.

CVE-2022-0635

Thu, 23 Feb 2023 05:01:55 +0000

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.

The post CVE-2022-0635 appeared first on CVE Vulnerability.