Filtered by vendor Linaro Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-1010294 1 Linaro 1 Op-tee 2019-07-16 N/A
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from previous Trusted Application. The component is: optee_os. The fixed version is: 3.4.0 and later.
CVE-2018-12563 1 Linaro 1 Lava 2018-08-10 N/A
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml.
CVE-2018-12564 2 Debian, Linaro 2 Debian Linux, Lava 2018-08-10 N/A
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml.