Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
78aad5ce by security tracker role at 2022-02-10T08:10:10+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,21 @@
+CVE-2022-24703
+ RESERVED
+CVE-2022-24702
+ RESERVED
+CVE-2022-24701
+ RESERVED
+CVE-2022-24700
+ RESERVED
+CVE-2022-0556
+ RESERVED
+CVE-2022-0555
+ RESERVED
+CVE-2022-0554
+ RESERVED
+CVE-2022-0553
+ RESERVED
+CVE-2022-0552
+ RESERVED
CVE-2022-24699
RESERVED
CVE-2022-24698
@@ -104,22 +122,19 @@ CVE-2022-0536 (Exposure of Sensitive Information to an
Unauthorized Actor in NPM
TODO: check
CVE-2022-0535
RESERVED
-CVE-2022-0534
- RESERVED
+CVE-2022-0534 (A vulnerability was found in htmldoc version 1.9.15 where the
stack ou ...)
+ TODO: check
CVE-2022-0533
RESERVED
-CVE-2022-0532
- RESERVED
+CVE-2022-0532 (An incorrect sysctls validation vulnerability was found in
CRI-O 1.18 ...)
NOT-FOR-US: cri-o
CVE-2022-0531
RESERVED
-CVE-2022-0530
- RESERVED
+CVE-2022-0530 (A flaw was found in unzip 6.0. The vulnerability occurs during
the con ...)
- unzip <undetermined>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2051395
TODO: clarify details
-CVE-2022-0529
- RESERVED
+CVE-2022-0529 (A flaw was found in unzip 6.0. The vulnerability occurs during
the con ...)
- unzip <undetermined>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2051402
TODO: clarify details
@@ -135,12 +150,12 @@ CVE-2021-46677
RESERVED
CVE-2021-46676
RESERVED
-CVE-2022-24668
- RESERVED
-CVE-2022-24667
- RESERVED
-CVE-2022-24666
- RESERVED
+CVE-2022-24668 (A program using swift-nio-http2 is vulnerable to a denial of
service a ...)
+ TODO: check
+CVE-2022-24667 (A program using swift-nio-http2 is vulnerable to a denial of
service a ...)
+ TODO: check
+CVE-2022-24666 (A program using swift-nio-http2 is vulnerable to a denial of
service a ...)
+ TODO: check
CVE-2022-0528
RESERVED
CVE-2022-0527 (Cross-site Scripting (XSS) - Stored in GitHub repository
chatwoot/chat ...)
@@ -971,30 +986,30 @@ CVE-2022-24323
RESERVED
CVE-2022-24322
RESERVED
-CVE-2022-24321
- RESERVED
-CVE-2022-24320
- RESERVED
-CVE-2022-24319
- RESERVED
-CVE-2022-24318
- RESERVED
-CVE-2022-24317
- RESERVED
-CVE-2022-24316
- RESERVED
-CVE-2022-24315
- RESERVED
-CVE-2022-24314
- RESERVED
-CVE-2022-24313
- RESERVED
-CVE-2022-24312
- RESERVED
-CVE-2022-24311
- RESERVED
-CVE-2022-24310
- RESERVED
+CVE-2022-24321 (A CWE-754: Improper Check for Unusual or Exceptional
Conditions vulner ...)
+ TODO: check
+CVE-2022-24320 (A CWE-295: Improper Certificate Validation vulnerability
exists that c ...)
+ TODO: check
+CVE-2022-24319 (A CWE-295: Improper Certificate Validation vulnerability
exists that c ...)
+ TODO: check
+CVE-2022-24318 (A CWE-326: Inadequate Encryption Strength vulnerability exists
that co ...)
+ TODO: check
+CVE-2022-24317 (A CWE-862: Missing Authorization vulnerability exists that
could cause ...)
+ TODO: check
+CVE-2022-24316 (A CWE-665: Improper Initialization vulnerability exists that
could cau ...)
+ TODO: check
+CVE-2022-24315 (A CWE-125: Out-of-bounds Read vulnerability exists that could
cause de ...)
+ TODO: check
+CVE-2022-24314 (A CWE-125: Out-of-bounds Read vulnerability exists that could
cause me ...)
+ TODO: check
+CVE-2022-24313 (A CWE-120: Buffer Copy without Checking Size of Input
vulnerability ex ...)
+ TODO: check
+CVE-2022-24312 (A CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ...)
+ TODO: check
+CVE-2022-24311 (A CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ...)
+ TODO: check
+CVE-2022-24310 (A CWE-190: Integer Overflow or Wraparound vulnerability exists
that co ...)
+ TODO: check
CVE-2022-24309
RESERVED
CVE-2022-0480
@@ -1591,7 +1606,7 @@ CVE-2022-24145 (Tenda AX3 v16.03.12.10_CN was discovered
to contain a stack over
NOT-FOR-US: Tenda routers
CVE-2022-24144 (Tenda AX3 v16.03.12.10_CN was discovered to contain a command
injectio ...)
NOT-FOR-US: Tenda routers
-CVE-2022-24143 (Tenda AX3 v16.03.12.10_CN was discovered to contain a stack
overflow i ...)
+CVE-2022-24143 (Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was
discovered to con ...)
NOT-FOR-US: Tenda routers
CVE-2022-24142 (Tenda AX3 v16.03.12.10_CN was discovered to contain a stack
overflow i ...)
NOT-FOR-US: Tenda routers
@@ -1972,8 +1987,7 @@ CVE-2022-0392 (Heap-based Buffer Overflow in GitHub
repository vim/vim prior to
[buster] - vim <no-dsa> (Minor issue)
NOTE: https://huntr.dev/bounties/d00a2acd-1935-4195-9d5b-4115ef6b3126
NOTE:
https://github.com/vim/vim/commit/806d037671e133bd28a7864248763f643967973a
(v8.2.4218)
-CVE-2022-0391 [urllib.parse does not sanitize URLs containing ASCII newline
and tabs]
- RESERVED
+CVE-2022-0391 (A flaw was found in Python, specifically within the
urllib.parse modul ...)
- python3.9 3.9.7-1
[bullseye] - python3.9 <no-dsa> (Minor issue)
- python3.7 <removed>
@@ -3599,14 +3613,14 @@ CVE-2022-23633
RESERVED
CVE-2022-23632
RESERVED
-CVE-2022-23631
- RESERVED
+CVE-2022-23631 (superjson is a program to allow JavaScript expressions to be
serialize ...)
+ TODO: check
CVE-2022-23630
RESERVED
CVE-2022-23629
RESERVED
-CVE-2022-23628
- RESERVED
+CVE-2022-23628 (OPA is an open source, general-purpose policy engine. Under
certain co ...)
+ TODO: check
CVE-2022-23627 (ArchiSteamFarm (ASF) is a C# application with primary purpose
of idlin ...)
NOT-FOR-US: ArchiSteamFarm
CVE-2022-23626 (m1k1o/blog is a lightweight self-hosted facebook-styled PHP
blog. Erro ...)
@@ -3617,22 +3631,22 @@ CVE-2022-23624 (Frourio-express is a minimal full stack
framework, for TypeScrip
NOT-FOR-US: Frourio-express
CVE-2022-23623 (Frourio is a full stack framework, for TypeScript. Frourio
users who u ...)
NOT-FOR-US: Frourio
-CVE-2022-23622
- RESERVED
-CVE-2022-23621
- RESERVED
-CVE-2022-23620
- RESERVED
-CVE-2022-23619
- RESERVED
-CVE-2022-23618
- RESERVED
-CVE-2022-23617
- RESERVED
-CVE-2022-23616
- RESERVED
-CVE-2022-23615
- RESERVED
+CVE-2022-23622 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23621 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23620 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23619 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23618 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23617 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23616 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-23615 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
CVE-2022-23614 (Twig is an open source template language for PHP. When in a
sandbox mo ...)
- php-twig 3.3.8-1
NOTE:
https://github.com/twigphp/Twig/security/advisories/GHSA-5mv2-rx3q-4w2v
@@ -5602,12 +5616,12 @@ CVE-2022-23051
RESERVED
CVE-2022-23050
RESERVED
-CVE-2022-23049
- RESERVED
-CVE-2022-23048
- RESERVED
-CVE-2022-23047
- RESERVED
+CVE-2022-23049 (Exponent CMS 2.6.0patch2 allows an authenticated user to
inject persis ...)
+ TODO: check
+CVE-2022-23048 (Exponent CMS 2.6.0patch2 allows an authenticated admin user to
upload ...)
+ TODO: check
+CVE-2022-23047 (Exponent CMS 2.6.0patch2 allows an authenticated admin user to
inject ...)
+ TODO: check
CVE-2022-23046 (PhpIPAM v1.4.4 allows an authenticated admin user to inject
SQL senten ...)
NOT-FOR-US: PhpIPAM
CVE-2022-23045 (PhpIPAM v1.4.4 allows an authenticated admin user to inject
persistent ...)
@@ -6103,8 +6117,8 @@ CVE-2022-0164
RESERVED
CVE-2022-0163
RESERVED
-CVE-2022-0162
- RESERVED
+CVE-2022-0162 (The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build
160325 ...)
+ TODO: check
CVE-2022-0161
RESERVED
CVE-2022-0160
@@ -6515,20 +6529,20 @@ CVE-2022-0155 (follow-redirects is vulnerable to
Exposure of Private Personal In
NOTE: https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406
NOTE: https://github.com/follow-redirects/follow-redirects/issues/183
NOTE:
https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22
(v1.14.7)
-CVE-2022-22813
- RESERVED
-CVE-2022-22812
- RESERVED
-CVE-2022-22811
- RESERVED
-CVE-2022-22810
- RESERVED
-CVE-2022-22809
- RESERVED
-CVE-2022-22808
- RESERVED
-CVE-2022-22807
- RESERVED
+CVE-2022-22813 (A CWE-798: Use of Hard-coded Credentials vulnerability exists.
If an a ...)
+ TODO: check
+CVE-2022-22812 (A CWE-79: Improper Neutralization of Input During Web Page
Generation ...)
+ TODO: check
+CVE-2022-22811 (A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability
exists that ...)
+ TODO: check
+CVE-2022-22810 (A CWE-307: Improper Restriction of Excessive Authentication
Attempts v ...)
+ TODO: check
+CVE-2022-22809 (A CWE-306: Missing Authentication for Critical Function
vulnerability ...)
+ TODO: check
+CVE-2022-22808 (A CWE-942: Permissive Cross-domain Policy with Untrusted
Domains vulne ...)
+ TODO: check
+CVE-2022-22807 (A CWE-1021 Improper Restriction of Rendered UI Layers or
Frames vulner ...)
+ TODO: check
CVE-2022-22806
RESERVED
CVE-2022-22805
@@ -6581,10 +6595,10 @@ CVE-2022-22782
RESERVED
CVE-2022-22781
RESERVED
-CVE-2022-22780
- RESERVED
-CVE-2022-22779
- RESERVED
+CVE-2022-22780 (The Zoom Client for Meetings chat functionality was
susceptible to Zip ...)
+ TODO: check
+CVE-2022-22779 (The Keybase Clients for macOS and Windows before version 5.9.0
fails t ...)
+ TODO: check
CVE-2022-22778
RESERVED
CVE-2022-22777
@@ -7312,10 +7326,10 @@ CVE-2022-0122 (forge is vulnerable to URL Redirection
to Untrusted Site ...)
NOT-FOR-US: forge
CVE-2022-0121 (hoppscotch is vulnerable to Exposure of Sensitive Information
to an Un ...)
NOT-FOR-US: hoppscotch
-CVE-2022-22567
- RESERVED
-CVE-2022-22566
- RESERVED
+CVE-2022-22567 (Select Dell Client Commercial and Consumer platforms are
vulnerable to ...)
+ TODO: check
+CVE-2022-22566 (Select Dell Client Commercial and Consumer platforms contain a
pre-boo ...)
+ TODO: check
CVE-2022-22565
RESERVED
CVE-2022-22564
@@ -7354,44 +7368,44 @@ CVE-2022-22548
RESERVED
CVE-2022-22547
RESERVED
-CVE-2022-22546
- RESERVED
-CVE-2022-22545
- RESERVED
-CVE-2022-22544
- RESERVED
-CVE-2022-22543
- RESERVED
-CVE-2022-22542
- RESERVED
+CVE-2022-22546 (Due to improper HTML encoding in input control summary, an
authorized ...)
+ TODO: check
+CVE-2022-22545 (A high privileged user who has access to transaction SM59 can
read con ...)
+ TODO: check
+CVE-2022-22544 (Solution Manager (Diagnostics Root Cause Analysis Tools) -
version 720 ...)
+ TODO: check
+CVE-2022-22543 (SAP NetWeaver Application Server for ABAP (Kernel) and ABAP
Platform ( ...)
+ TODO: check
+CVE-2022-22542 (S/4HANA Supplier Factsheet exposes the private address and
bank detail ...)
+ TODO: check
CVE-2022-22541
RESERVED
-CVE-2022-22540
- RESERVED
-CVE-2022-22539
- RESERVED
-CVE-2022-22538
- RESERVED
-CVE-2022-22537
- RESERVED
-CVE-2022-22536
- RESERVED
-CVE-2022-22535
- RESERVED
-CVE-2022-22534
- RESERVED
-CVE-2022-22533
- RESERVED
-CVE-2022-22532
- RESERVED
+CVE-2022-22540 (SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701,
702, 731 ...)
+ TODO: check
+CVE-2022-22539 (When a user opens a manipulated JPEG file format (.jpg,
2d.x3d) receiv ...)
+ TODO: check
+CVE-2022-22538 (When a user opens a manipulated Adobe Illustrator file format
(.ai, ai ...)
+ TODO: check
+CVE-2022-22537 (When a user opens a manipulated Tagged Image File Format
(.tiff, 2d.x3 ...)
+ TODO: check
+CVE-2022-22536 (SAP NetWeaver Application Server ABAP, SAP NetWeaver
Application Serve ...)
+ TODO: check
+CVE-2022-22535 (SAP ERP HCM Portugal - versions 600, 604, 608, does not
perform necess ...)
+ TODO: check
+CVE-2022-22534 (Due to insufficient encoding of user input, SAP NetWeaver
allows an un ...)
+ TODO: check
+CVE-2022-22533 (Due to improper error handling in SAP NetWeaver Application
Server Jav ...)
+ TODO: check
+CVE-2022-22532 (In SAP NetWeaver Application Server Java - versions KRNL64NUC
7.22, 7. ...)
+ TODO: check
CVE-2022-22531 (The F0743 Create Single Payment application of SAP S/4HANA -
versions ...)
NOT-FOR-US: SAP
CVE-2022-22530 (The F0743 Create Single Payment application of SAP S/4HANA -
versions ...)
NOT-FOR-US: SAP
CVE-2022-22529 (SAP Enterprise Threat Detection (ETD) - version 2.0, does not
sufficie ...)
NOT-FOR-US: SAP
-CVE-2022-22528
- RESERVED
+CVE-2022-22528 (SAP Adaptive Server Enterprise (ASE) - version 16.0,
installation make ...)
+ TODO: check
CVE-2022-22527
RESERVED
CVE-2022-0120
@@ -10940,8 +10954,8 @@ CVE-2021-45288 (A Double Free vulnerability exists in
filedump.c in GPAC 1.0.1,
NOTE:
https://github.com/gpac/gpac/commit/9bbce9634cba1128aa4b96d590be578ae3ce80b3
CVE-2021-45287
RESERVED
-CVE-2021-45286
- RESERVED
+CVE-2021-45286 (Directory Traversal vulnerability exists in ZZCMS 2021 via the
skin pa ...)
+ TODO: check
CVE-2021-45285
RESERVED
CVE-2021-45284
@@ -12641,8 +12655,8 @@ CVE-2022-21827
RESERVED
CVE-2022-21826
RESERVED
-CVE-2022-21825
- RESERVED
+CVE-2022-21825 (An Improper Access Control vulnerability exists in Citrix
Workspace Ap ...)
+ TODO: check
CVE-2022-21823 (A insecure storage of sensitive information vulnerability
exists in Iv ...)
NOT-FOR-US: Ivanti
CVE-2021-44831
@@ -12859,8 +12873,8 @@ CVE-2022-21239
RESERVED
CVE-2022-21229
RESERVED
-CVE-2022-21226
- RESERVED
+CVE-2022-21226 (Out-of-bounds read in the Intel(R) Trace Analyzer and
Collector before ...)
+ TODO: check
CVE-2022-21206
RESERVED
CVE-2022-21188
@@ -12877,8 +12891,8 @@ CVE-2022-21162
RESERVED
CVE-2022-21161
RESERVED
-CVE-2022-21156
- RESERVED
+CVE-2022-21156 (Access of uninitialized pointer in the Intel(R) Trace Analyzer
and Col ...)
+ TODO: check
CVE-2022-21152
RESERVED
CVE-2022-21150
@@ -12993,8 +13007,8 @@ CVE-2021-44545
RESERVED
CVE-2021-44457
RESERVED
-CVE-2021-44454
- RESERVED
+CVE-2021-44454 (Improper input validation in a third-party component for
Intel(R) Quar ...)
+ TODO: check
CVE-2021-43351
RESERVED
CVE-2021-4080 (crater is vulnerable to Unrestricted Upload of File with
Dangerous Typ ...)
@@ -13007,8 +13021,8 @@ CVE-2021-23188
RESERVED
CVE-2021-23168
RESERVED
-CVE-2021-23152
- RESERVED
+CVE-2021-23152 (Improper access control in the Intel(R) Advisor software
before versio ...)
+ TODO: check
CVE-2021-23145
RESERVED
CVE-2021-XXXX [Rainloop stores passwords in cleartext in logfile]
@@ -13830,8 +13844,8 @@ CVE-2022-21240
RESERVED
CVE-2022-21237
RESERVED
-CVE-2022-21218
- RESERVED
+CVE-2022-21218 (Uncaught exception in the Intel(R) Trace Analyzer and
Collector before ...)
+ TODO: check
CVE-2022-21212
RESERVED
CVE-2022-21197
@@ -13844,8 +13858,8 @@ CVE-2022-21140
RESERVED
CVE-2022-21139
RESERVED
-CVE-2022-21133
- RESERVED
+CVE-2022-21133 (Out-of-bounds read in the Intel(R) Trace Analyzer and
Collector before ...)
+ TODO: check
CVE-2021-44470
RESERVED
CVE-2021-4037 [security regression for CVE-2018-13405]
@@ -15607,8 +15621,8 @@ CVE-2022-21661 (WordPress is a free and open-source
content management system wr
NOTE:
https://github.com/WordPress/wordpress-develop/commit/17efac8c8ec64555eff5cf51a3eff81e06317214
NOTE: https://hackerone.com/reports/1378209
NOTE:
https://www.zerodayinitiative.com/blog/2022/1/18/cve-2021-21661-exposing-database-info-via-wordpress-sql-injection
-CVE-2022-21660
- RESERVED
+CVE-2022-21660 (Gin-vue-admin is a backstage management system based on vue
and gin. I ...)
+ TODO: check
CVE-2022-21659 (Flask-AppBuilder is an application development framework,
built on top ...)
TODO: check
CVE-2022-21658 (Rust is a multi-paradigm, general-purpose programming language
designe ...)
@@ -17010,16 +17024,16 @@ CVE-2021-3961 (snipe-it is vulnerable to Improper
Neutralization of Input During
NOT-FOR-US: snipe-it
CVE-2022-21216
RESERVED
-CVE-2022-21204
- RESERVED
+CVE-2022-21204 (Improper permissions for Intel(R) Quartus(R) Prime Pro Edition
before ...)
+ TODO: check
CVE-2022-21200
RESERVED
-CVE-2022-21174
- RESERVED
-CVE-2022-21157
- RESERVED
-CVE-2022-21153
- RESERVED
+CVE-2022-21174 (Improper access control in a third-party component of Intel(R)
Quartus ...)
+ TODO: check
+CVE-2022-21157 (Improper access control in the Intel(R) Smart Campus Android
applicati ...)
+ TODO: check
+CVE-2022-21153 (Improper access control in the Intel(R) Capital Global Summit
Android ...)
+ TODO: check
CVE-2022-21151
RESERVED
CVE-2022-21138
@@ -17407,14 +17421,14 @@ CVE-2021-43579 (A stack-based buffer overflow in
image_load_bmp() in HTMLDOC <
NOTE: Crash in CLI tool, no security impact
CVE-2021-3950 (django-helpdesk is vulnerable to Improper Neutralization of
Input Duri ...)
NOT-FOR-US: django-helpdesk
-CVE-2022-21220
- RESERVED
+CVE-2022-21220 (Improper restriction of XML external entity for Intel(R)
Quartus(R) Pr ...)
+ TODO: check
CVE-2022-21207
RESERVED
-CVE-2022-21205
- RESERVED
-CVE-2022-21203
- RESERVED
+CVE-2022-21205 (Improper restriction of XML external entity reference in DSP
Builder P ...)
+ TODO: check
+CVE-2022-21203 (Improper permissions in the SafeNet Sentinel driver for
Intel(R) Quart ...)
+ TODO: check
CVE-2022-21181
RESERVED
CVE-2022-21180
@@ -22721,52 +22735,52 @@ CVE-2022-20048
RESERVED
CVE-2022-20047
RESERVED
-CVE-2022-20046
- RESERVED
-CVE-2022-20045
- RESERVED
-CVE-2022-20044
- RESERVED
-CVE-2022-20043
- RESERVED
-CVE-2022-20042
- RESERVED
-CVE-2022-20041
- RESERVED
-CVE-2022-20040
- RESERVED
-CVE-2022-20039
- RESERVED
-CVE-2022-20038
- RESERVED
-CVE-2022-20037
- RESERVED
-CVE-2022-20036
- RESERVED
-CVE-2022-20035
- RESERVED
-CVE-2022-20034
- RESERVED
-CVE-2022-20033
- RESERVED
-CVE-2022-20032
- RESERVED
-CVE-2022-20031
- RESERVED
-CVE-2022-20030
- RESERVED
-CVE-2022-20029
- RESERVED
-CVE-2022-20028
- RESERVED
-CVE-2022-20027
- RESERVED
-CVE-2022-20026
- RESERVED
-CVE-2022-20025
- RESERVED
-CVE-2022-20024
- RESERVED
+CVE-2022-20046 (In Bluetooth, there is a possible memory corruption due to a
logic err ...)
+ TODO: check
+CVE-2022-20045 (In Bluetooth, there is a possible service crash due to a use
after fre ...)
+ TODO: check
+CVE-2022-20044 (In Bluetooth, there is a possible service crash due to a use
after fre ...)
+ TODO: check
+CVE-2022-20043 (In Bluetooth, there is a possible escalation of privilege due
to a mis ...)
+ TODO: check
+CVE-2022-20042 (In Bluetooth, there is a possible information disclosure due
to incorr ...)
+ TODO: check
+CVE-2022-20041 (In Bluetooth, there is a possible escalation of privilege due
to a mis ...)
+ TODO: check
+CVE-2022-20040 (In power_hal_manager_service, there is a possible permission
bypass du ...)
+ TODO: check
+CVE-2022-20039 (In ccu driver, there is a possible memory corruption due to an
integer ...)
+ TODO: check
+CVE-2022-20038 (In ccu driver, there is a possible memory corruption due to an
incorre ...)
+ TODO: check
+CVE-2022-20037 (In ion driver, there is a possible information disclosure due
to an in ...)
+ TODO: check
+CVE-2022-20036 (In ion driver, there is a possible information disclosure due
to an in ...)
+ TODO: check
+CVE-2022-20035 (In vcu driver, there is a possible information disclosure due
to a use ...)
+ TODO: check
+CVE-2022-20034 (In Preloader XFLASH, there is a possible escalation of
privilege due t ...)
+ TODO: check
+CVE-2022-20033 (In camera driver, there is a possible out of bounds read due
to an inc ...)
+ TODO: check
+CVE-2022-20032 (In vow driver, there is a possible memory corruption due to a
race con ...)
+ TODO: check
+CVE-2022-20031 (In fb driver, there is a possible memory corruption due to a
use after ...)
+ TODO: check
+CVE-2022-20030 (In vow driver, there is a possible out of bounds write due to
a stack- ...)
+ TODO: check
+CVE-2022-20029 (In cmdq driver, there is a possible out of bounds read due to
an incor ...)
+ TODO: check
+CVE-2022-20028 (In Bluetooth, there is a possible out of bounds write due to a
missing ...)
+ TODO: check
+CVE-2022-20027 (In Bluetooth, there is a possible out of bounds write due to a
missing ...)
+ TODO: check
+CVE-2022-20026 (In Bluetooth, there is a possible out of bounds write due to a
missing ...)
+ TODO: check
+CVE-2022-20025 (In Bluetooth, there is a possible out of bounds write due to a
missing ...)
+ TODO: check
+CVE-2022-20024 (In system service, there is a possible permission bypass due
to a miss ...)
+ TODO: check
CVE-2022-20023 (In Bluetooth, there is a possible application crash due to
bluetooth f ...)
NOT-FOR-US: MediaTek
CVE-2022-20022 (In Bluetooth, there is a possible link disconnection due to
bluetooth ...)
@@ -22779,8 +22793,8 @@ CVE-2022-20019 (In libMtkOmxGsmDec, there is a possible
information disclosure d
NOT-FOR-US: MediaTek
CVE-2022-20018 (In seninf driver, there is a possible information disclosure
due to un ...)
NOT-FOR-US: MediaTek
-CVE-2022-20017
- RESERVED
+CVE-2022-20017 (In ion driver, there is a possible information disclosure due
to an in ...)
+ TODO: check
CVE-2022-20016 (In vow driver, there is a possible memory corruption due to
improper l ...)
NOT-FOR-US: MediaTek
CVE-2022-20015 (In kd_camera_hw driver, there is a possible information
disclosure due ...)
@@ -26781,7 +26795,7 @@ CVE-2021-40698
CVE-2021-40697 (Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020
Release ...)
NOT-FOR-US: Adobe
CVE-2021-40696
- RESERVED
+ REJECTED
CVE-2021-40695 (It was possible for a student to view their quiz grade before
it had b ...)
- moodle <removed>
CVE-2021-40694 (Insufficient escaping of the LaTeX preamble made it possible
for site ...)
@@ -28453,10 +28467,10 @@ CVE-2021-40047
RESERVED
CVE-2021-40046
RESERVED
-CVE-2021-40045
- RESERVED
-CVE-2021-40044
- RESERVED
+CVE-2021-40045 (There is a vulnerability of signature verification mechanism
failure i ...)
+ TODO: check
+CVE-2021-40044 (There is a permission verification vulnerability in the
Bluetooth modu ...)
+ TODO: check
CVE-2021-40043
RESERVED
CVE-2021-40042 (There is a release of invalid pointer vulnerability in some
Huawei pro ...)
@@ -28513,8 +28527,8 @@ CVE-2021-40017
RESERVED
CVE-2021-40016
RESERVED
-CVE-2021-40015
- RESERVED
+CVE-2021-40015 (There is a race condition vulnerability in the binder driver
subsystem ...)
+ TODO: check
CVE-2021-40014 (The bone voice ID trusted application (TA) has a heap overflow
vulnera ...)
NOT-FOR-US: Huawei
CVE-2021-40013
@@ -28549,20 +28563,20 @@ CVE-2021-39999
RESERVED
CVE-2021-39998 (There is Vulnerability of APIs being concurrently called for
multiple ...)
NOT-FOR-US: Huawei
-CVE-2021-39997
- RESERVED
+CVE-2021-39997 (There is a vulnerability of unstrict input parameter
verification in t ...)
+ TODO: check
CVE-2021-39996 (There is a Heap-based buffer overflow vulnerability with the
NFC modul ...)
NOT-FOR-US: Huawei
CVE-2021-39995 (Some Huawei products use the OpenHpi software for hardware
management. ...)
NOT-FOR-US: Huawei
-CVE-2021-39994
- RESERVED
+CVE-2021-39994 (There is an arbitrary address access vulnerability with the
product li ...)
+ TODO: check
CVE-2021-39993 (There is an Integer overflow vulnerability with ACPU in
smartphones. S ...)
NOT-FOR-US: Huawei
-CVE-2021-39992
- RESERVED
-CVE-2021-39991
- RESERVED
+CVE-2021-39992 (There is an improper security permission configuration
vulnerability o ...)
+ TODO: check
+CVE-2021-39991 (There is an unauthorized rewriting vulnerability with the
memory acces ...)
+ TODO: check
CVE-2021-39990 (The screen lock module has a Stack-based Buffer Overflow
vulnerability ...)
NOT-FOR-US: Huawei
CVE-2021-39989 (The HwNearbyMain module has a Exposure of Sensitive
Information to an ...)
@@ -28571,8 +28585,8 @@ CVE-2021-39988 (The HwNearbyMain module has a NULL
Pointer Dereference vulnerabi
NOT-FOR-US: Huawei
CVE-2021-39987 (The HwNearbyMain module has a Data Processing Errors
vulnerability.Suc ...)
NOT-FOR-US: Huawei
-CVE-2021-39986
- RESERVED
+CVE-2021-39986 (There is an unauthorized rewriting vulnerability with the
memory acces ...)
+ TODO: check
CVE-2021-39985 (The HwNearbyMain module has a Improper Validation of Array
Index vulne ...)
NOT-FOR-US: Huawei
CVE-2021-39984 (Huawei idap module has a Out-of-bounds Read
vulnerability.Successful e ...)
@@ -28657,8 +28671,8 @@ CVE-2021-39945 (Improper access control in the GitLab
CE/EE API affecting all ve
- gitlab <unfixed>
CVE-2021-39944 (An issue has been discovered in GitLab CE/EE affecting all
versions st ...)
- gitlab <unfixed>
-CVE-2021-39943
- RESERVED
+CVE-2021-39943 (An authorization logic error in the External Status Check API
in GitLa ...)
+ TODO: check
CVE-2021-39942 (A denial of service vulnerability in GitLab CE/EE affecting
all versio ...)
- gitlab <unfixed>
CVE-2021-39941 (An information disclosure vulnerability in GitLab CE/EE
versions 12.0 ...)
@@ -35794,8 +35808,8 @@ CVE-2021-37117 (There is a Service logic vulnerability
in Smartphone.Successful
NOT-FOR-US: Huawei
CVE-2021-37116 (PCManager has a Weaknesses Introduced During Design
vulnerability .Suc ...)
NOT-FOR-US: Huawei
-CVE-2021-37115
- RESERVED
+CVE-2021-37115 (There is an unauthorized rewriting vulnerability with the
memory acces ...)
+ TODO: check
CVE-2021-37114 (There is an Out-of-bounds read vulnerability in
Smartphone.Successful ...)
NOT-FOR-US: Huawei
CVE-2021-37113 (There is a Privilege escalation vulnerability with the file
system com ...)
@@ -35806,12 +35820,12 @@ CVE-2021-37111 (There is a Memory leakage
vulnerability in Smartphone.Successful
NOT-FOR-US: Huawei
CVE-2021-37110 (There is a Timing design defects in Smartphone.Successful
exploitation ...)
NOT-FOR-US: Huawei
-CVE-2021-37109
- RESERVED
+CVE-2021-37109 (There is a security protection bypass vulnerability with the
modem.Suc ...)
+ TODO: check
CVE-2021-37108
RESERVED
-CVE-2021-37107
- RESERVED
+CVE-2021-37107 (There is an improper memory access permission configuration on
ACPU.Su ...)
+ TODO: check
CVE-2021-37106 (There is a command injection vulnerability in CMA service
module of Fu ...)
NOT-FOR-US: FusionCompute (Huawei)
CVE-2021-37105 (There is an improper file upload control vulnerability in
FusionComput ...)
@@ -37679,8 +37693,8 @@ CVE-2021-36304
RESERVED
CVE-2021-36303
RESERVED
-CVE-2021-36302
- RESERVED
+CVE-2021-36302 (All Dell EMC Integrated System for Microsoft Azure Stack Hub
versions ...)
+ TODO: check
CVE-2021-36301 (Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to
version ...)
NOT-FOR-US: Dell
CVE-2021-36300 (iDRAC9 versions prior to 5.00.00.00 contain an improper input
validati ...)
@@ -45225,8 +45239,8 @@ CVE-2021-33168
RESERVED
CVE-2021-33167
RESERVED
-CVE-2021-33166
- RESERVED
+CVE-2021-33166 (Incorrect default permissions for the Intel(R) RXT for
Chromebook appl ...)
+ TODO: check
CVE-2021-33165
RESERVED
CVE-2021-33164
@@ -45247,8 +45261,8 @@ CVE-2021-33157
RESERVED
CVE-2021-33156
RESERVED
-CVE-2021-33155
- RESERVED
+CVE-2021-33155 (Improper input validation in firmware for some Intel(R)
Wireless Bluet ...)
+ TODO: check
CVE-2021-33154
RESERVED
CVE-2021-33153
@@ -45263,8 +45277,8 @@ CVE-2021-33149
RESERVED
CVE-2021-33148
RESERVED
-CVE-2021-33147
- RESERVED
+CVE-2021-33147 (Improper conditions check in the Intel(R) IPP Crypto library
before ve ...)
+ TODO: check
CVE-2021-33146
RESERVED
CVE-2021-33145
@@ -45279,12 +45293,12 @@ CVE-2021-33141
RESERVED
CVE-2021-33140
RESERVED
-CVE-2021-33139
- RESERVED
+CVE-2021-33139 (Improper conditions check in firmware for some Intel(R)
Wireless Bluet ...)
+ TODO: check
CVE-2021-33138
RESERVED
-CVE-2021-33137
- RESERVED
+CVE-2021-33137 (Out-of-bounds write in the Intel(R) Kernelflinger project may
allow an ...)
+ TODO: check
CVE-2021-33136
RESERVED
CVE-2021-33135
@@ -45299,8 +45313,8 @@ CVE-2021-33131
RESERVED
CVE-2021-33130
RESERVED
-CVE-2021-33129
- RESERVED
+CVE-2021-33129 (Incorrect default permissions in the software installer for
the Intel( ...)
+ TODO: check
CVE-2021-33128
RESERVED
CVE-2021-33127
@@ -45317,40 +45331,38 @@ CVE-2021-33122
RESERVED
CVE-2021-33121
RESERVED
-CVE-2021-33120
- RESERVED
+CVE-2021-33120 (Out of bounds read under complex microarchitectural condition
in memor ...)
- intel-microcode <unfixed>
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html
-CVE-2021-33119
- RESERVED
+CVE-2021-33119 (Improper access control in the Intel(R) RealSense(TM) DCM
before versi ...)
+ TODO: check
CVE-2021-33118 (Improper access control in the software installer for the
Intel(R) Ser ...)
NOT-FOR-US: Intel
CVE-2021-33117
RESERVED
CVE-2021-33116
RESERVED
-CVE-2021-33115
- RESERVED
-CVE-2021-33114
- RESERVED
-CVE-2021-33113
- RESERVED
+CVE-2021-33115 (Improper input validation for some Intel(R) PROSet/Wireless
WiFi in UE ...)
+ TODO: check
+CVE-2021-33114 (Improper input validation for some Intel(R) PROSet/Wireless
WiFi in mu ...)
+ TODO: check
+CVE-2021-33113 (Improper input validation for some Intel(R) PROSet/Wireless
WiFi in mu ...)
+ TODO: check
CVE-2021-33112
RESERVED
CVE-2021-33111
RESERVED
-CVE-2021-33110
- RESERVED
+CVE-2021-33110 (Improper input validation for some Intel(R) Wireless
Bluetooth(R) prod ...)
+ TODO: check
CVE-2021-33109
RESERVED
CVE-2021-33108
RESERVED
-CVE-2021-33107
- RESERVED
+CVE-2021-33107 (Insufficiently protected credentials in USB provisioning for
Intel(R) ...)
+ TODO: check
CVE-2021-33106 (Integer overflow in the Safestring library maintained by
Intel(R) may ...)
NOT-FOR-US: Intel
-CVE-2021-33105
- RESERVED
+CVE-2021-33105 (Out-of-bounds read in some Intel(R) Core(TM) processors with
Radeon(TM ...)
NOT-FOR-US: Intel
CVE-2021-33104
RESERVED
@@ -45358,8 +45370,8 @@ CVE-2021-33103
RESERVED
CVE-2021-33102
RESERVED
-CVE-2021-33101
- RESERVED
+CVE-2021-33101 (Uncontrolled search path in the Intel(R) GPA software before
version 2 ...)
+ TODO: check
CVE-2021-33100
RESERVED
CVE-2021-33099
@@ -45371,8 +45383,8 @@ CVE-2021-33098 (Improper input validation in the
Intel(R) Ethernet ixgbe driver
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html
CVE-2021-33097 (Time-of-check time-of-use vulnerability in the Crypto API
Toolkit for ...)
NOT-FOR-US: Intel
-CVE-2021-33096
- RESERVED
+CVE-2021-33096 (Improper isolation of shared resources in network on chip for
the Inte ...)
+ TODO: check
CVE-2021-33095 (Unquoted search path in the installer for the Intel(R) NUC M15
Laptop ...)
NOT-FOR-US: Intel
CVE-2021-33094 (Insecure inherited permissions in the installer for the
Intel(R) NUC M ...)
@@ -45427,8 +45439,8 @@ CVE-2021-33070
RESERVED
CVE-2021-33069
RESERVED
-CVE-2021-33068
- RESERVED
+CVE-2021-33068 (Null pointer dereference in subsystem for Intel(R) AMT before
versions ...)
+ TODO: check
CVE-2021-33067
RESERVED
CVE-2021-33066
@@ -45441,8 +45453,8 @@ CVE-2021-33063 (Uncontrolled search path in the
Intel(R) RealSense(TM) D400 Seri
NOT-FOR-US: Intel
CVE-2021-33062 (Incorrect default permissions in the software installer for
the Intel( ...)
NOT-FOR-US: Intel
-CVE-2021-33061
- RESERVED
+CVE-2021-33061 (Insufficient control flow management for the Intel(R) 82599
Ethernet C ...)
+ TODO: check
CVE-2021-33060
RESERVED
CVE-2021-33059 (Improper input validation in the Intel(R) Administrative Tools
for Int ...)
@@ -62071,14 +62083,14 @@ CVE-2021-26618
RESERVED
CVE-2021-26617
RESERVED
-CVE-2021-26616
- RESERVED
+CVE-2021-26616 (An OS command injection was found in SecuwaySSL, when special
characte ...)
+ TODO: check
CVE-2021-26615 (ARK library allows attackers to execute remote code via the
parameter( ...)
NOT-FOR-US: ARK library
CVE-2021-26614 (ius_get.cgi in IpTime C200 camera allows remote code
execution. A remo ...)
NOT-FOR-US: IpTime C200 camera
-CVE-2021-26613
- RESERVED
+CVE-2021-26613 (improper input validation vulnerability in nexacro permits
copying fil ...)
+ TODO: check
CVE-2021-26612 (An improper input validation leading to arbitrary file
creation was di ...)
NOT-FOR-US: Tobesoft Nexacro
CVE-2021-26611 (HejHome GKW-IC052 IP Camera contained a hard-coded credentials
vulnera ...)
@@ -70854,8 +70866,8 @@ CVE-2021-22956 (An uncontrolled resource consumption
vulnerability exists in Cit
NOT-FOR-US: Citrix
CVE-2021-22955 (A unauthenticated denial of service vulnerability exists in
Citrix ADC ...)
NOT-FOR-US: Citrix
-CVE-2021-22954
- RESERVED
+CVE-2021-22954 (A cross-site request forgery vulnerability exists in Concrete
CMS < ...)
+ TODO: check
CVE-2021-22953 (A CSRF in Concrete CMS version 8.5.5 and below allows an
attacker to c ...)
NOT-FOR-US: Concrete CMS
CVE-2021-22952 (A vulnerability found in UniFi Talk application V1.12.3 and
earlier pe ...)
@@ -71251,8 +71263,8 @@ CVE-2021-22819 (A CWE-1021 Improper Restriction of
Rendered UI Layers or Frames
NOT-FOR-US: Schneider Electric
CVE-2021-22818 (A CWE-307 Improper Restriction of Excessive Authentication
Attempts vu ...)
NOT-FOR-US: Schneider Electric
-CVE-2021-22817
- RESERVED
+CVE-2021-22817 (A CWE-276: Incorrect Default Permissions vulnerability exists
that cou ...)
+ TODO: check
CVE-2021-22816 (A CWE-754: Improper Check for Unusual or Exceptional
Conditions vulner ...)
NOT-FOR-US: Schneider Electric
CVE-2021-22815 (A CWE-200: Information Exposure vulnerability exists which
could cause ...)
@@ -90822,52 +90834,52 @@ CVE-2021-0185
RESERVED
CVE-2021-0184
RESERVED
-CVE-2021-0183
- RESERVED
+CVE-2021-0183 (Improper Validation of Specified Index, Position, or Offset in
Input i ...)
+ TODO: check
CVE-2021-0182 (Uncontrolled resource consumption in the Intel(R) HAXM software
before ...)
NOT-FOR-US: Intel Hardware Accelerated Execution Manager
CVE-2021-0181
RESERVED
CVE-2021-0180 (Uncontrolled resource consumption in the Intel(R) HAXM software
before ...)
NOT-FOR-US: Intel Hardware Accelerated Execution Manager
-CVE-2021-0179
- RESERVED
-CVE-2021-0178
- RESERVED
-CVE-2021-0177
- RESERVED
-CVE-2021-0176
- RESERVED
-CVE-2021-0175
- RESERVED
-CVE-2021-0174
- RESERVED
-CVE-2021-0173
- RESERVED
-CVE-2021-0172
- RESERVED
-CVE-2021-0171
- RESERVED
-CVE-2021-0170
- RESERVED
-CVE-2021-0169
- RESERVED
-CVE-2021-0168
- RESERVED
-CVE-2021-0167
- RESERVED
-CVE-2021-0166
- RESERVED
-CVE-2021-0165
- RESERVED
-CVE-2021-0164
- RESERVED
-CVE-2021-0163
- RESERVED
-CVE-2021-0162
- RESERVED
-CVE-2021-0161
- RESERVED
+CVE-2021-0179 (Improper Use of Validation Framework in software for Intel(R)
PROSet/W ...)
+ TODO: check
+CVE-2021-0178 (Improper input validation in software for Intel(R)
PROSet/Wireless Wi- ...)
+ TODO: check
+CVE-2021-0177 (Improper Validation of Consistency within input in software for
Intel( ...)
+ TODO: check
+CVE-2021-0176 (Improper input validation in firmware for some Intel(R)
PROSet/Wireles ...)
+ TODO: check
+CVE-2021-0175 (Improper Validation of Specified Index, Position, or Offset in
Input i ...)
+ TODO: check
+CVE-2021-0174 (Improper Use of Validation Framework in firmware for some
Intel(R) PRO ...)
+ TODO: check
+CVE-2021-0173 (Improper Validation of Consistency within input in firmware for
some I ...)
+ TODO: check
+CVE-2021-0172 (Improper input validation in firmware for some Intel(R)
PROSet/Wireles ...)
+ TODO: check
+CVE-2021-0171 (Improper access control in software for Intel(R)
PROSet/Wireless Wi-Fi ...)
+ TODO: check
+CVE-2021-0170 (Exposure of Sensitive Information to an Unauthorized Actor in
firmware ...)
+ TODO: check
+CVE-2021-0169 (Uncontrolled Search Path Element in software for Intel(R)
PROSet/Wirel ...)
+ TODO: check
+CVE-2021-0168 (Improper input validation in firmware for some Intel(R)
PROSet/Wireles ...)
+ TODO: check
+CVE-2021-0167 (Improper access control in software for Intel(R)
PROSet/Wireless Wi-Fi ...)
+ TODO: check
+CVE-2021-0166 (Exposure of Sensitive Information to an Unauthorized Actor in
firmware ...)
+ TODO: check
+CVE-2021-0165 (Improper input validation in firmware for Intel(R)
PROSet/Wireless Wi- ...)
+ TODO: check
+CVE-2021-0164 (Improper access control in firmware for Intel(R)
PROSet/Wireless Wi-Fi ...)
+ TODO: check
+CVE-2021-0163 (Improper Validation of Consistency within input in software for
Intel( ...)
+ TODO: check
+CVE-2021-0162 (Improper input validation in software for Intel(R)
PROSet/Wireless Wi- ...)
+ TODO: check
+CVE-2021-0161 (Improper input validation in firmware for Intel(R)
PROSet/Wireless Wi- ...)
+ TODO: check
CVE-2021-0160 (Uncontrolled search path in some Intel(R) NUC Pro Chassis
Element Aver ...)
NOT-FOR-US: Intel
CVE-2021-0159
@@ -90876,8 +90888,8 @@ CVE-2021-0158 (Improper input validation in the BIOS
firmware for some Intel(R)
NOT-FOR-US: Intel
CVE-2021-0157 (Insufficient control flow management in the BIOS firmware for
some Int ...)
NOT-FOR-US: Intel
-CVE-2021-0156
- RESERVED
+CVE-2021-0156 (Improper input validation in the firmware for some Intel(R)
Processors ...)
+ TODO: check
CVE-2021-0155
RESERVED
CVE-2021-0154
@@ -90894,14 +90906,14 @@ CVE-2021-0149
RESERVED
CVE-2021-0148 (Insertion of information into log file in firmware for some
Intel(R) S ...)
NOT-FOR-US: Intel
-CVE-2021-0147
- RESERVED
+CVE-2021-0147 (Improper locking in the Power Management Controller (PMC) for
some Int ...)
+ TODO: check
CVE-2021-0146 (Hardware allows activation of test or debug logic at runtime
for some ...)
- intel-microcode <unfixed>
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html
NOTE:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207
-CVE-2021-0145
- RESERVED
+CVE-2021-0145 (Improper initialization of shared resources in some Intel(R)
Processor ...)
+ TODO: check
CVE-2021-0144 (Insecure default variable initialization for the Intel BSSA DFT
featur ...)
NOT-FOR-US: Intel
CVE-2021-0143 (Improper permissions in the installer for the Intel(R) Brand
Verificat ...)
@@ -90942,17 +90954,16 @@ CVE-2021-0129 (Improper access control in BlueZ may
allow an authenticated user
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html
CVE-2021-0128
RESERVED
-CVE-2021-0127
- RESERVED
+CVE-2021-0127 (Insufficient control flow management in some Intel(R)
Processors may a ...)
- intel-microcode <unfixed>
NOTE:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html
NOTE:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220207
CVE-2021-0126
RESERVED
-CVE-2021-0125
- RESERVED
-CVE-2021-0124
- RESERVED
+CVE-2021-0125 (Improper initialization in the firmware for some Intel(R)
Processors m ...)
+ TODO: check
+CVE-2021-0124 (Improper access control in the firmware for some Intel(R)
Processors m ...)
+ TODO: check
CVE-2021-0123
RESERVED
CVE-2021-0122
@@ -90961,48 +90972,48 @@ CVE-2021-0121 (Improper access control in the
installer for some Intel(R) Iris(R
NOT-FOR-US: Intel
CVE-2021-0120 (Improper initialization in the installer for some Intel(R)
Graphics DC ...)
NOT-FOR-US: Intel
-CVE-2021-0119
- RESERVED
-CVE-2021-0118
- RESERVED
-CVE-2021-0117
- RESERVED
-CVE-2021-0116
- RESERVED
-CVE-2021-0115
- RESERVED
-CVE-2021-0114 (Insecure default variable initialization for the Intel BSSA DFT
featur ...)
+CVE-2021-0119 (Improper initialization in the firmware for some Intel(R)
Processors m ...)
+ TODO: check
+CVE-2021-0118 (Out-of-bounds read in the firmware for some Intel(R) Processors
may al ...)
+ TODO: check
+CVE-2021-0117 (Pointer issues in the firmware for some Intel(R) Processors may
allow ...)
+ TODO: check
+CVE-2021-0116 (Out-of-bounds write in the firmware for some Intel(R)
Processors may a ...)
+ TODO: check
+CVE-2021-0115 (Buffer overflow in the firmware for some Intel(R) Processors
may allow ...)
+ TODO: check
+CVE-2021-0114 (Unchecked return value in the firmware for some Intel(R)
Processors ma ...)
NOT-FOR-US: Intel
CVE-2021-0113 (Out of bounds write in the BMC firmware for Intel(R) Server
Board M10J ...)
NOT-FOR-US: Intel
CVE-2021-0112 (Unquoted service path in the Intel Unite(R) Client for Windows
before ...)
NOT-FOR-US: Intel
-CVE-2021-0111
- RESERVED
+CVE-2021-0111 (NULL pointer dereference in the firmware for some Intel(R)
Processors ...)
+ TODO: check
CVE-2021-0110 (Improper access control in some Intel(R) Thunderbolt(TM)
Windows DCH D ...)
NOT-FOR-US: Intel
CVE-2021-0109 (Insecure inherited permissions for the Intel(R) SOC driver
package for ...)
NOT-FOR-US: Intel
CVE-2021-0108 (Uncontrolled search path in the Intel Unite(R) Client for
Windows befo ...)
NOT-FOR-US: Intel
-CVE-2021-0107
- RESERVED
+CVE-2021-0107 (Unchecked return value in the firmware for some Intel(R)
Processors ma ...)
+ TODO: check
CVE-2021-0106 (Incorrect default permissions in the Intel(R) Optane(TM) DC
Persistent ...)
NOT-FOR-US: Intel
CVE-2021-0105 (Insecure inherited permissions in some Intel(R) ProSet/Wireless
WiFi d ...)
NOT-FOR-US: Intel
CVE-2021-0104 (Uncontrolled search path element in the installer for the
Intel(R) Rap ...)
NOT-FOR-US: Intel
-CVE-2021-0103
- RESERVED
+CVE-2021-0103 (Insufficient control flow management in the firmware for some
Intel(R) ...)
+ TODO: check
CVE-2021-0102 (Insecure inherited permissions in the Intel Unite(R) Client for
Window ...)
NOT-FOR-US: Intel
CVE-2021-0101 (Buffer overflow in the BMC firmware for Intel(R) Server
BoardM10JNP2SB ...)
NOT-FOR-US: Intel
CVE-2021-0100 (Incorrect default permissions in the installer for the Intel(R)
SSD Da ...)
NOT-FOR-US: Intel
-CVE-2021-0099
- RESERVED
+CVE-2021-0099 (Insufficient control flow management in the firmware for some
Intel(R) ...)
+ TODO: check
CVE-2021-0098 (Improper access control in the Intel Unite(R) Client for
Windows befor ...)
NOT-FOR-US: Intel
CVE-2021-0097 (Path traversal in the BMC firmware for Intel(R) Server Board
M10JNP2SB ...)
@@ -91013,12 +91024,12 @@ CVE-2021-0095 (Improper initialization in the
firmware for some Intel(R) Process
NOT-FOR-US: Intel
CVE-2021-0094 (Improper link resolution before file access in Intel(R) DSA
before ver ...)
NOT-FOR-US: Intel
-CVE-2021-0093
- RESERVED
-CVE-2021-0092
- RESERVED
-CVE-2021-0091
- RESERVED
+CVE-2021-0093 (Incorrect default permissions in the firmware for some Intel(R)
Proces ...)
+ TODO: check
+CVE-2021-0092 (Improper access control in the firmware for some Intel(R)
Processors m ...)
+ TODO: check
+CVE-2021-0091 (Improper access control in the firmware for some Intel(R)
Processors m ...)
+ TODO: check
CVE-2021-0090 (Uncontrolled search path element in Intel(R) DSA before version
20.11. ...)
NOT-FOR-US: Intel
CVE-2021-0089 (Observable response discrepancy in some Intel(R) Processors may
allow ...)
@@ -91054,16 +91065,16 @@ CVE-2021-0078 (Improper input validation in software
for some Intel(R) PROSet/Wi
NOT-FOR-US: Intel
CVE-2021-0077 (Insecure inherited permissions in the installer for the
Intel(R) VTune ...)
NOT-FOR-US: Intel
-CVE-2021-0076
- RESERVED
+CVE-2021-0076 (Improper Validation of Specified Index, Position, or Offset in
Input i ...)
+ TODO: check
CVE-2021-0075 (Out-of-bounds write in firmware for some Intel(R)
PROSet/Wireless WiFi ...)
NOT-FOR-US: Intel
CVE-2021-0074 (Improper permissions in the installer for the Intel(R)
Computing Impro ...)
NOT-FOR-US: Intel
CVE-2021-0073 (Insufficient control flow management in Intel(R) DSA before
version 20 ...)
NOT-FOR-US: Intel
-CVE-2021-0072
- RESERVED
+CVE-2021-0072 (Improper input validation in firmware for some Intel(R)
PROSet/Wireles ...)
+ TODO: check
CVE-2021-0071 (Improper input validation in firmware for some Intel(R)
PROSet/Wireles ...)
NOT-FOR-US: Intel
CVE-2021-0070 (Improper input validation in the BMC firmware for Intel(R)
Server Boar ...)
@@ -91074,8 +91085,8 @@ CVE-2021-0068
RESERVED
CVE-2021-0067 (&nbsp;Improper access control in system firmware for some
Intel(R) ...)
NOT-FOR-US: Intel
-CVE-2021-0066
- RESERVED
+CVE-2021-0066 (Improper input validation in firmware for Intel(R)
PROSet/Wireless Wi- ...)
+ TODO: check
CVE-2021-0065 (Incorrect default permissions in the Intel(R) PROSet/Wireless
WiFi sof ...)
NOT-FOR-US: Intel
CVE-2021-0064 (Insecure inherited permissions in the Intel(R) PROSet/Wireless
WiFi so ...)
@@ -91086,8 +91097,8 @@ CVE-2021-0062 (Improper input validation in some
Intel(R) Graphics Drivers befor
NOT-FOR-US: Intel drivers for Windows
CVE-2021-0061 (Improper initialization in some Intel(R) Graphics Driver before
versio ...)
NOT-FOR-US: Intel drivers for Windows
-CVE-2021-0060
- RESERVED
+CVE-2021-0060 (Insufficient compartmentalization in HECI subsystem for the
Intel(R) S ...)
+ TODO: check
CVE-2021-0059
RESERVED
CVE-2021-0058 (Incorrect default permissions in the Intel(R) NUC M15 Laptop
Kit Drive ...)
@@ -125474,8 +125485,8 @@ CVE-2020-12990
REJECTED
CVE-2020-12989
REJECTED
-CVE-2020-12988
- REJECTED
+CVE-2020-12988 (A potential denial of service (DoS) vulnerability exists in
the integr ...)
+ TODO: check
CVE-2020-12987 (A heap information leak/kernel pool address disclosure
vulnerability i ...)
NOT-FOR-US: AMD
CVE-2020-12986 (An insufficient pointer validation vulnerability in the AMD
Graphics D ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78aad5ce28c3148c64f8e59635f2acfd49cb4fe6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78aad5ce28c3148c64f8e59635f2acfd49cb4fe6
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
