Debian dla-3704 : libxerces-c-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3704 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3704-1 [email protected]...

CVE-2018-9461

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9461

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9464

In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9389

In ip6appenddata of ip6output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9401

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9405

In BnDmAgent::onTransact of dmagent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9406

In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9387

In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9464

creationtimestamp| type| source ---|---|--- 2025-01-17 23:38:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113846328851742839 2025-01-17 23:57:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2261 2025-01-18 00:16:10+00:00| seen|...

CVE-2018-9406

creationtimestamp| type| source ---|---|--- 2025-01-17 23:38:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113846328803469397 2025-01-17 23:57:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2258 2025-01-18 00:16:05+00:00| seen|...

CVE-2018-9461

creationtimestamp| type| source ---|---|--- 2025-01-17 23:38:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113846328817829575 2025-01-17 23:57:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2262 2025-01-18 00:16:08+00:00| seen|...

CVE-2018-9405

creationtimestamp| type| source ---|---|--- 2025-01-17 23:23:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113846269803457662 2025-01-17 23:57:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2256 2025-01-18 00:16:03+00:00| seen|...

CVE-2018-9387

creationtimestamp| type| source ---|---|--- 2025-01-17 23:23:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113846269739889777 2025-01-17 23:57:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2260 2025-01-18 00:15:55+00:00| seen|...

CVE-2018-9389

creationtimestamp| type| source ---|---|--- 2025-01-17 23:23:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113846269754562026 2025-01-17 23:57:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2259 2025-01-18 00:15:57+00:00| seen|...

CVE-2018-9401

creationtimestamp| type| source ---|---|--- 2025-01-17 23:23:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113846269768652312 2025-01-17 23:57:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2257 2025-01-18 00:15:59+00:00| seen|...

CVE-2018-9401

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9401

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9401

CVE-2018-9401 describes a kernel memory access vulnerability in user space caused by an incorrect bounds check, enabling local privilege escalation without extra execution privileges and with no user interaction. Connected documents indicate this CVE is associated with Google Pixel/Nexus devices ...

CVE-2018-9406

In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...