Security Advisory - Improper Authentication Vulnerability in Several Smartphones

There is an improper authentication vulnerability in several smartphones. The system does not sufficiently validate certain parameter passed from the bottom level, the attacker should trick the user into installing a malicious application and control the bottom level, successful exploit could cau...

CVE-2019-9259

In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113575306...

CVE-2019-9259

In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113575306...

CVE-2019-9259

CVE-2019-9259 affects the Android 10 Bluetooth stack, where a use-after-free leads to an out-of-bounds write. This could allow local elevation of privilege to SYSTEM with no user interaction. Exploitation status is not detailed in the provided docs. Remediation is addressed in Android 10 security...

Fedora 28 : soundtouch (2018-93a43993aa)

Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for soundtouch FEDORA-2018-fadf6f5a9f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for soundtouch FEDORA-2018-f4f75985b8

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated soundtouch packages fix security vulnerabilities

Updated soundtouch package fixes security vulnerabilities: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file CVE-2017-9258. The...

Fedora 27 : soundtouch (2018-4197fff086)

Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for soundtouch FEDORA-2018-93a43993aa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)

This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...

UBUNTU-CVE-2018-9259

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...

CVE-2018-9259

Wireshark vulnerability CVE-2018-9259 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The MP4 dissector could crash due to unbounded box recursion; the issue was fixed by restricting recursion depth in epan/dissectors/file-mp4.c. Remediations include upgrading to Wireshark 2.4.6 or 2.2.14 (per SU...

CVE-2015-9259

CVE-2015-9259 affects Docker Notary prior to 0.1. The vulnerability is in the checkRoot function in gotuf/client/client.go, which does not verify the expiry of root.json files as documented. As a result, even if a new root.json is deployed after a key is compromised, an attacker can craft update ...

CVE-2015-9259

In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json fi...

CVE-2017-9259

CVE-2017-9259 is a concrete vulnerability in SoundTouch 1.9.2 (TDStretch.cpp, TDStretch::acceptNewOverlapLength) that can cause a denial-of-service via a crafted WAV file (memory allocation error and crash). Related CVEs (e.g., CVE-2017-9258, CVE-2017-9260, CVE-2018-1000223, CVE-2018-14044, CVE-2...

CVE-2016-9259

CVE-2016-9259 refers to a cross-site scripting (XSS) vulnerability in Tenable Nessus prior to version 6.9.1. Connected sources describe it as a stored XSS flaw caused by improper validation of user-supplied input, exploitable by an authenticated remote attacker via specially crafted requests to e...