CVE-2018-0392

A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user. The vulnerability is due to insufficient access control permissions i.e., World-Readable. An attacker could exploit this vulnerability by logging in to the CLI. An...

CVE-2018-0392

CVE-2018-0392 affects Cisco Policy Suite: a local, authenticated attacker can access files owned by another user due to world-readable permissions in the CLI. Root cause is insufficient access controls. Exploitation requires logging into the CLI; impact is exposure of potentially sensitive user-o...

Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified (CVE-2016-0392)

Summary A fix is available for IBM Storwize V7000 Unified, for GPFS security vulnerabilities Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM Storwize V7000 Unified. CVEID: CVE-2016-0392 DESCRIPTION: IBM General Parallel Fi...

Security Bulletin: GPFS security vulnerabilities in IBM SONAS (CVE-2016-0392)

Summary A fix is available for IBM SONAS, for GPFS security vulnerability Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM SONAS. CVEID: CVE-2016-0392 DESCRIPTION: IBM General Parallel File System could allow a local attack...

Security Bulletin: The GPFS pattern provided with IBM PureApplication System is affected by a security vulnerability. (CVE-2016-0392)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale and IBM GPFS that could allow a local attacker to inject commands into setuid file parameters and execute commands as root. IBM PureApplication System provides a GPFS pattern and addressed the applicable CVE...

Google Android Mediaserver Multiple Denial of Service Vulnerabilities（CVE-2017-0392）

VBRISeeker::CreateFromSource may cause an uncaught c++ exception due to trying to allocate a buffer where the size is attacker controllable. Fix: https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c PoC:...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0392

Upstream security update. Follow RHBA-2017-0392 for details...

CVE-2017-0392

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4,...

CVE-2017-0392

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4,...

CVE-2017-0392

CVE-2017-0392 is a denial-of-service flaw in Android’s Mediaserver, specifically VBRISeeker.cpp in libstagefright. A crafted media file can cause a device hang or reboot via Mediaserver. Affected products/versions include Android 4.4.4–7.1.1. Public details describe the vulnerability’s root cause...

CVE-2016-0392

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

CVE-2016-0392

CVE-2016-0392 affects IBM GPFS/Spectrum Scale components. A local attacker could inject commands into setuid file parameters and execute as root due to a vulnerability in GPFS/Spectrum Scale. Affected: GPFS Storage Server 2.0.0–2.0.7; Elastic Storage Server 2.5.x–2.5.5, 3.x before 3.5.5, and 4.x ...

Oracle: Security Advisory (ELSA-2011-0392)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL17213 - Apache vulnerability CVE-2002-0392

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

CVE-2015-0392

Affected product/versions: Oracle Siebel CRM 8.1.1 and 8.2.2. Vulnerable component: Siebel Core – Server BizLogic Script (Config – Scripting). Root cause / nature: A security vulnerability in the BizLogic Script component could allow unauthorized access to data, as described by CVE-2015-0392 and ...

CVE-2015-0392

Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Config - Scripting...

CVE-2014-0392

Technical details about CVE-2014-0392 are not publicly provided in the supplied documents. No specifics on affected product/version, vulnerability mechanism, impact, or fixes are present. Monitor for updates.

CVE-2014-0392

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2013-0392

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2012-5059...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-0392...