漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Out of Bounds Read in OpenRazer Driver
Vulnerability Description
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Vulnerability Type
跨界内存读
Vulnerability Title
OpenRazer 缓冲区错误漏洞
Vulnerability Description
OpenRazer是一个开源驱动程序和用户空间守护程序。用于控制 GNU/Linux 上的 Razer 照明和其他功能。 OpenRazer v3.5.1之前版本存在缓冲区错误漏洞，攻击者利用该漏洞可以泄露 razer_attr_read_dpi_stages 的堆栈地址，从而可能绕过 KASLR。
CVSS Information
N/A
Vulnerability Type
N/A