Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.
In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System ex...
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with ne...
NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The ...
NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be u...
In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution ...
In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additiona...
As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM t...
On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”. If the file is present, and contains a supporte...
In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault. As per the “measure...
Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism. Different parts of the syst...
PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea1...
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account....
In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System ...
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System...
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with Syste...
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privil...
In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System ex...
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System ...
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System...
In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with S...
In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System...
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with Sy...
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System e...
In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with Sys...