Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.1.10.2022.0065
Kategorie:Mageia Linux Local Security Checks
Titel:Mageia: Security Advisory (MGASA-2022-0065)
Zusammenfassung:The remote host is missing an update for the 'kernel-firmware-nonfree, radeon-firmware' package(s) announced via the MGASA-2022-0065 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'kernel-firmware-nonfree, radeon-firmware' package(s) announced via the MGASA-2022-0065 advisory.

Vulnerability Insight:
This update provides new and updated nonfree firmwares and fixes at least
the following security issues:

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi
may allow an unauthenticated user to potentially enable escalation of
privilege via local access (CVE-2021-0066 / SA-00539).

Improper input validation in firmware for some Intel(R) PROSet/Wireless
Wi-Fi may allow a privileged user to potentially enable information
disclosure via local access (CVE-2021-0072 / SA-00539).

Improper Validation of Specified Index, Position, or Offset in Input in
firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged
user to potentially enable denial of service via local access
(CVE-2021-0076 / SA-00539).

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi
may allow a privileged user to potentially enable escalation of privilege
via local access (CVE-2021-0161, CVE-2021-0168 / SA-00539).

Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi may
allow an unauthenticated user to potentially enable escalation of privilege
via local access (CVE-2021-0164 / SA-00539).

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi
may allow an unauthenticated user to potentially enable denial of service
via adjacent access (CVE-2021-0165 / SA-00539).

Exposure of Sensitive Information to an Unauthorized Actor in firmware for
some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially
enable escalation of privilege via local access (CVE-2021-0166 / SA-00539).

Exposure of Sensitive Information to an Unauthorized Actor in firmware for
some Intel(R) PROSet/Wireless Wi-Fi may allow an authenticated user to
potentially enable information disclosure via local access
(CVE-2021-0170 / SA-00539).

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi
may allow an unauthenticated user to potentially enable denial of service via
adjacent access (CVE-2021-0172 / SA-00539).

Improper Validation of Consistency within input in firmware for some Intel(R)
PROSet/Wireless Wi-Fi may allow a unauthenticated user to potentially enable
denial of service via adjacent access (CVE-2021-0173 / SA-00539).

Improper Use of Validation Framework in firmware for some Intel(R) PROSet/
Wireless Wi-Fi may allow a unauthenticated user to potentially enable denial
of service via adjacent access (CVE-2021-0174 / SA-00539).

Improper Validation of Specified Index, Position, or Offset in Input in
firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated
user to potentially enable denial of service via adjacent access
(CVE-2021-0175 / SA-00539).

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi
may allow a privileged user to potentially enable denial of service via local
access (CVE-2021-0176 / SA-00539).

Improper conditions check in firmware for some ... [Please see the references for more information on the vulnerabilities]

Affected Software/OS:
'kernel-firmware-nonfree, radeon-firmware' package(s) on Mageia 8.

Solution:
Please install the updated package(s).

CVSS Score:
4.6

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2021-0066
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00539.html
Common Vulnerability Exposure (CVE) ID: CVE-2021-0072
Common Vulnerability Exposure (CVE) ID: CVE-2021-0076
Common Vulnerability Exposure (CVE) ID: CVE-2021-0161
Common Vulnerability Exposure (CVE) ID: CVE-2021-0164
Common Vulnerability Exposure (CVE) ID: CVE-2021-0165
Common Vulnerability Exposure (CVE) ID: CVE-2021-0166
Common Vulnerability Exposure (CVE) ID: CVE-2021-0168
Common Vulnerability Exposure (CVE) ID: CVE-2021-0170
Common Vulnerability Exposure (CVE) ID: CVE-2021-0172
Common Vulnerability Exposure (CVE) ID: CVE-2021-0173
Common Vulnerability Exposure (CVE) ID: CVE-2021-0174
Common Vulnerability Exposure (CVE) ID: CVE-2021-0175
Common Vulnerability Exposure (CVE) ID: CVE-2021-0176
Common Vulnerability Exposure (CVE) ID: CVE-2021-33139
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00604.html
Common Vulnerability Exposure (CVE) ID: CVE-2021-33155
CopyrightCopyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.