69 matches found
CVE-2015-6638
CVE-2015-6638 is an Elevation of Privilege vulnerability in the Imagination Technologies driver used by Android. A locally installed crafted application could gain kernel privileges on affected devices. AffectedPlatform: Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Root caus...
CVE-2015-6638
The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908...
Oracle: Security Advisory (ELSA-2014-0433)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 : kernel (RHSA-2014:0772)
Updated kernel packages that fix three security issues and two bugs are now available for Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...
CVE-2014-6638
The CVE-2014-6638 entry concerns the wTMDesktop (com.wTMDesktop) Android app that does not verify X.509 certificates from SSL servers, enabling MITM-style information disclosure. Affected software is the Android application version 1 of wTMDesktop; the underlying issue is failure to validate serv...
openSUSE Security Update : v8 (openSUSE-SU-2014:0092-1)
Update spec-file to fit the changes in V8 addition of internal ICU - Building against system ICU - Regenerate Makefiles before using them - Update to 3.22.24.8 - Security fixes bnc854473 : - CVE-2013-6638: Buffer overflow in v8 - CVE-2013-6639: Out of bounds write in v8 - CVE-2013-6640: Out of...
openSUSE Security Update : chromium (openSUSE-SU-2013:1933-1)
Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...
openSUSE Security Update : chromium (openSUSE-SU-2013:1927-1)
Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...
openSUSE Security Update : v8 (openSUSE-SU-2013:1962-1)
Update spec-file to fit the changes in V8 addition of internal ICU - Building against system ICU - Regenerate Makefiles before using them - Update to 3.22.24.8 - Security fixes bcn854473 : - CVE-2013-6638: Buffer overflow in v8 - CVE-2013-6639: Out of bounds write in v8 - CVE-2013-6640: Out of...
RedHat Update for kernel RHSA-2014:0433-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 5 : kernel (ELSA-2014-0433-1)
From Red Hat Security Advisory 2014:0433 : Updated kernel packages that fix two security issues, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20140424)
A flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled TCP packets with both the SYN and FIN flags set. A remote attacker could use this flaw to consume an excessive amount of resources on the target system, potentially resulting in a denial of service...
Linux Kernel 'tcp_rcv_state_process()'函数拒绝服务漏洞
BUGTRAQ ID: 65654 CVECAN ID: CVE-2012-6638 Linux Kernel是Linux操作系统的内核。 Linux kernel 3.2.24之前版本net/ipv4/tcpinput.c内的tcprcvstateprocess函数在处理大量的SYN+FIN TCP数据包时，存在越界访问错误，远程攻击者可利用此漏洞造成拒绝服务。 0 Linux kernel 3.2.24 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
CVE-2012-6638
The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...
CVE-2012-6638
The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...
BELL-CVE-2012-6638 CVE-2012-6638 does not affect BellSoft software
Bulletin has no description...
CVE-2012-2663
extensions/libxttcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant...
CVE-2012-6638
CVE-2012-6638 (Linux kernel) affects the tcp_rcv_state_process in net/ipv4/tcp_input.c and can cause a DoS due to a flood of SYN+FIN packets. The vulnerability exists in kernels before 3.2.24 and is fixed in the 3.2.24 update (per ChangeLog-3.2.24). Exploitation is described as remote and results...
CVE-2012-6638
The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource consumption via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663...