Pesquisadores
Voltar
Lin
#6484
de 60,387
48.3
CVSS total
Vulnerabilidades
·
8
Média
5
Alta
3
PT-2024-11230
2021-06-16
5.5
CVE-2021-47221
Linux
Linux Kernel
O problema está relacionado ao recurso de redzoning do SLUB no kernel do Linux, que verifica se há corrupção a partir de `s->object size` em vez de `s->inuse`. Isso pode fazer com que o ponteiro da lista livre seja gravado além de `s->object size` quando o tamanho do objeto é menor que 24, corrompendo a redzone. O problema é visível ao usar “slub debug=ZF”. O kernel ajusta o deslocamento para permanecer dentro de `s->object size` a fim de resolver o problema. Não se tem conhecimento da existência de caches nesse intervalo de tamanho no kernel atualmente.
PT-2019-14465
2019-12-20
7.5
CVE-2019-15911
Asus
Asus Ts-101
The issue is related to insecure key transport in ZigBee communication, allowing attackers to obtain sensitive information, cause denial of service attacks, take over smart home devices, and tamper with messages.
PT-2019-14466
2019-12-20
5.0
CVE-2019-15912
Zigbee
Zigbee Pro
An issue was discovered that allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure on devices using ZigBee PRO.
PT-2019-14467
2019-12-20
7.5
CVE-2019-15913
Xiaomi
Xiaomi Rtcgq01Lm
The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain sensitive information, launch denial of service attacks, take over smart home devices, and tamper with messages.
PT-2019-14464
2019-12-20
5.0
CVE-2019-15910
Asus
Asus Ts-101
An issue was discovered that allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network procedure".
PT-2019-14469
2019-12-20
5.0
CVE-2019-15915
Xiaomi
Xiaomi Rtcgq01Lm
An issue allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network procedure".
PT-2019-14468
2019-12-20
5.0
CVE-2019-15914
Xiaomi
Xiaomi Rtcgq01Lm
An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure.
PT-2019-2492
2019-06-11
7.8
CVE-2019-1023
Microsoft
Edge
An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow a remote attacker to disclose protected information using a specially crafted web page. The attacker could obtain information to further compromise the user's system.