New CVE entries this week

cip-dev Pavel Machek 2 participants 2 messages Jun 18, 2021 – Jun 20, 2021

lore

Share & tools

lore

Pavel Machek

author

2021-06-18 08:04 UTC #0 lore raw

Hi!

In last import, CVE-2020-36385 and CVE-2020-36386 was confused. That's fixed now. And we have following new issues:

* 2021-06-13

CVE-2021-0129 -- Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation, fixed 4.9+

CVE-2021-0512 -- HID arrays, fixed 4.9+

CVE-2021-28691 -- Xen, fixed 5.10+

CVE-2021-3573 -- Bluetooth UAF, fixed 4.9+

* 2021-06-18

CVE-2021-32078 -- ARM: footbridge:, hopefully noone uses this

CVE-2021-34693 -- can: bcm: fix infoleak in struct bcm_msg_head

CVE-2020-36386 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

Best regards,
Pavel

Signature · 2 lines

DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6535): https://lists.cip-project.org/g/cip-dev/message/6535
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

市川正美

2021-06-20 23:51 UTC #1 lore raw

Hi!

2021年6月18日(金) 17:04 Pavel Machek <[email protected]>:

Quoted 19 lines

Hi!
In last import, CVE-2020-36385 and CVE-2020-36386 was confused. That's fixed now. And we have following new issues:
* 2021-06-13
CVE-2021-0129 -- Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation, fixed 4.9+
CVE-2021-0512 -- HID arrays, fixed 4.9+
CVE-2021-28691 -- Xen, fixed 5.10+
CVE-2021-3573 -- Bluetooth UAF, fixed 4.9+
* 2021-06-18

Quoted 8 lines

CVE-2021-32078 -- ARM: footbridge:, hopefully noone uses this
CVE-2021-34693 -- can: bcm: fix infoleak in struct bcm_msg_head
CVE-2020-36386 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

Thank you for the update.

Quoted 8 lines

Best regards,
Pavel
--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

Signature · 5 lines

Masami Ichikawa
Cybertrust Japan Co., Ltd.

Email :[email protected]
          :[email protected]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6543): https://lists.cip-project.org/g/cip-dev/message/6543
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-