p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de linux-oem-osp1 · Page n° 9

Vulnérabilité publiée pour linux-oem-osp1 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 248

  1. CVE-2019-0155

    Élevée · CVSS 7.8EPSS 0,67%Correctif disponible

    CVE-2019-0155

    Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may al

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1028.32
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. CVE-2019-0154

    Moyenne · CVSS 5.5EPSS 0,65%Correctif disponible

    CVE-2019-0154

    Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1027.31
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. CVE-2019-2214

    Élevée · CVSS 7.8EPSS 0,33%Correctif disponible

    CVE-2019-2214

    In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-136210786References: Upstream kernel

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1033.38
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. CVE-2019-2213

    Élevée · CVSS 7.4EPSS 0,15%Correctif disponible

    CVE-2019-2213

    In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1024.27
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  7. CVE-2019-18806

    Moyenne · CVSS 5.5EPSS 0,35%Correctif disponible

    CVE-2019-18806

    A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1027.31
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. CVE-2019-18813

    Élevée · CVSS 7.5EPSS 3,94%Correctif disponible

    CVE-2019-18813

    A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1033.38
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. CVE-2019-18805

    Critique · CVSS 9.8EPSS 3,47%Correctif disponible

    CVE-2019-18805

    An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1015.16
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. CVE-2019-18683

    Élevée · CVSS 7EPSS 0,99%Correctif disponible

    CVE-2019-18683

    An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1037.42
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. CVE-2019-17351

    Moyenne · CVSS 6.5EPSS 0,41%Correctif disponible

    CVE-2019-17351

    An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1024.27
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  16. CVE-2019-17075

    Élevée · CVSS 7.5EPSS 6,46%Correctif disponible

    CVE-2019-17075

    An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.

    linux-oem-osp1Systèmes d’exploitation
    • Mettez à jour vers 5.0.0-1033.38
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →