SA134 : Linux Kernel Vulnerabilities Oct/Nov 2016

SUMMARY Blue Coat products that include a vulnerable version of the Linux kernel are susceptible to several vulnerabilities. A remote attacker, with access to the management interface, can exploit these vulnerabilities to cause denial of service through system crashes or have unspecified other...

x86 task switch to VM86 mode mis-handled

ISSUE DESCRIPTION LDTR, just like TR, is purely a protected mode facility. Hence even when switching to a VM86 mode task, LDTR loading needs to follow protected mode semantics. This was violated by the code. IMPACT On SVM AMD hardware: a malicious unprivileged guest process can escalate its...

[SECURITY] [DSA 3719-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3719-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 21, 2016 https://www.debian.org/security/faq -...

CVE-2016-9067

Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

CVE-2016-9069

A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

UBUNTU-CVE-2016-9069

A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

CVE-2016-9067

Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

UBUNTU-CVE-2016-9067

Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

Oracle Linux 7 : ntp (ELSA-2016-2583)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2583 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - don't allow spoofed packet to enable symmetric interleaved mode CVE-2016-1548 - check mode of...

MariaDB Server 10.0.x < 10.0.28 Multiple Vulnerabilities

Binary data 9752.prm...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7989

CVE-2016-7989 affects Samsung Galaxy S4–S7. A malformed OTA WAP PUSH SMS containing an OMACP message triggers an unhandled ArrayIndexOutOfBoundsException in Samsung’s WifiServiceImpl (wifi-service.jar), causing the Android runtime to crash repeatedly and render the device unusable until a factory...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

Debian DLA-685-2 : libxi regression update

A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi packages. NOTE: Tenable Network Security has extracted the...

Amazon Linux: Security Advisory (ALAS-2016-733)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Server Component Remote Denial of Service Vulnerability (CNVD-2016-09885)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote denial of service vulnerability exists in the Server: GIS subcomponent of the MySQL Server component o...

Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868 We have encountered Windows kernel crashes in the win32k!sbitEmbolden and win32k!ttfdCloseFontContext functions while processing corrupted TTF font files. Excerpts of them are shown below: --- KERNELMODEEXCEPTIONNOTHANDLED 8e...

Microsoft Windows - win32k.sys TTF Processing win32k!sbit_Embolden win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Microsoft Windows - win32k.sys TTF Processing win32k!sbitEmbolden win32k!ttfdCloseFontContext Use-After-Free MS16-120 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868 We have encountered Windows kernel crashes in the win32k!sbitEmbolden and win32k!ttfdCloseFontContext functio...

Brave Software: Javascript confirm() crashes Brave on PC

Hello Brave, https://hackerone.com/smelt and I found a glitch for Brave on Windows. Summary: If you run the javascript code confirm, Brave will crash. This is major for a glitch, because people may be visiting websites that have confirm messages and Brave will suddenly and unexpectedly crash for...

ClamAV < 0.99.2 Crafted '7z' And 'Mew Packer' Parsing DoS Vulnerabilities - Linux

ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...