[slackware-security] wpa_supplicant

New wpasupplicant packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wpasupplicant-2.9-i586-1slack14.2.txz: Upgraded. This update fixes the following security issues: AP mode PMF...

CVE-2021-0535

creationtimestamp| type| source ---|---|--- 2021-06-22 14:24:41+00:00| seen| Telegram/1W5pLA6G3INjK7Gnrksg3HZeELDfoQhkpqiUk0DaMXrSaI...

CVE-2021-0535

In wpasctrlmsgqueuetimeout of ctrlifaceunix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0535

The CVE-2021-0535 entry is supported by concrete details across sources: an Android 11 issue affecting wpas_ctrl_msg_queue_timeout in ctrl_iface_unix.c where a memory corruption due to use-after-free could allow local escalation of privileges to system level. The Android 11 context and the exact ...

CVE-2020-0535

creationtimestamp| type| source ---|---|--- 2020-06-17 07:55:26+00:00| seen| https://t.me/cibsecurity/12786...

Intel Active Management Technology Information Disclosure Vulnerability (INTEL-SA-00295)

Intel Active Management Technology AMT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2020-0535

CVE-2020-0535 is part of Intel AMT/CSME family vulnerabilities described in INTEL-SA-00295. The issue is improper input validation in Intel AMT versions prior to 11.8.76/11.12.77/11.22.77/12.0.64 that can allow an unauthenticated user to potentially disclose information over the network. The Inte...

CVE-2018-0535

The CVE-2018-0535 entry concerns PHP 2chBBS, version bbs18c, which contains a cross-site scripting (CWE-79) vulnerability. The issue allows an attacker to inject arbitrary web script or HTML when a user visits a crafted page or link, as described across multiple sources (NVD/NVD-derived records a...

Solaris 10 (sparc) : 152260-01

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via RPC. Successful attack of this vulnerability can result in...

Solaris 10 (x86) : 152261-01

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via RPC. Successful attack of this vulnerability can result in...

CVE-2017-0535

An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2017-0535

CVE-2017-0535 is an information disclosure in the HTC sound codec driver for Android hosted on Kernel-3.10. The issue permits a local attacker, after compromising a privileged process, to access data outside its permissions, implying a confidentiality risk limited to the affected kernel/device co...

CVE-2016-0535

CVE-2016-0535 affects Oracle Sun Solaris 10 and 11 RPC component. The connected data confirms RPC-related vulnerability in Solaris 10/11, exploitable over unauthenticated network RPC calls, potentially causing partial denial of service. Affected subcomponent: RPC; affected OS versions: Solaris 10...

Oracle Solaris Critical Patch Update : jan2016_SRU11_3_3_6_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Libc Library. The supported version that is affected is 11. Difficult to exploit vulnerability requiring logon to...

Oracle: Security Advisory (ELSA-2015-0535)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201406-17

Gentoo Linux Local Security Checks GLSA 201406-17 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Multiple EMC RSA Products ESA-2015-081 Multiple Security Vulnerabilities

受影响的产品： RSA BSAFE Micro Edition Suite MES all 4.1.x versions prior to 4.1.3 RSA BSAFE Micro Edition Suite MES all 4.0.x versions prior to 4.0.8 RSA BSAFE Crypto-C Micro Edition Crypto-C ME 4.1 RSA BSAFE Crypto-C Micro Edition Crypto-C ME all versions prior to 4.0.4 RSA BSAFE Crypto-J all versions...

ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2015-081 CVE Identifier: CVE-2015-0533, CVE-2015-0534, CVE-2015-0535, CVE-2015-0536, CVE-2015-0537 Severity...

CVE-2015-0535

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-0535

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, relate...