SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4153-1)

This update for the Linux Kernel 3.12.74-606488 fixes several issues. The following security issues were fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. CVE-2018-5848: Fixed an unsigned integ...

SUSE-SU-2018:4158-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606496 fixes one issue. The following security issue was fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319...

CVE-2018-9568

In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...

CVE-2016-9568

Technical details for CVE-2016-9568 are not publicly available in the provided documents. Monitor for updates from other sources to assess impact, affected components, and remediation.

CVE-2016-9568

A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorized actions...

CVE-2017-9568

The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9568

The CVE-2017-9568 entry concerns the iOS app “financial-plus-mobile-banking/id731070564” (version 3.0.3) where the client fails to verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a cr...

CVE-2014-9568

CVE-2014-9568 affects puppetlabs-rabbitmq versions 3.0 through 4.1. The vulnerability arises because the Erlang cookie value is stored in the node’s facts, allowing local users to obtain sensitive information (demonstrated via Facter). Impact is partial confidentiality loss. Exploitation details ...

SuSE 11.3 Security Update : pulseaudio (SAT Patch Number 9568)

The following security issue is fixed in this update : - Fixed a remote denial of service attack in module-rtp-recv. CVE-2014-3970 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...