The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of NVIDIA’s Android crypto operating system driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability in the Linux operating system’s crypto/ccm.c driver arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to improperly interact with the CONFIGVMAPSTACK parameter, resulting in a service failure system...

Private CRT-based RSA Key Leakage

crypto/rsa in github.com/golang/go is vulnerable to private CRT-based RSA key leakage. The leakage happens due to an error in the CRT computation. And it fails to check RSA signature to prevent the error...

Man-in-the-middle (MitM)

github.com/golang/crypto is vulnerable to man-in-the-middle MitM attacks. The HostKeyCallback function currently interprets nil as to accept any host keys. A MitM server can allow the login to succeed and get the agemt to authenticate to the actual server...

Denial Of Service (DoS)

crypto/dsa in github.com/golang/go is vulnerable to denial of service DoS attacks. These attacks are possible due to a flaw in the Verify function in crypto/dsa/dsa.go. It doesn't properly check parameters passed to the big integer library. This flaw can be exploited through a a public key given ...

[SECURITY] Fedora 24 Update: bouncycastle-1.52-9.fc24

The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. The package is organized so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE...

Linux kernel denial of service vulnerability (CNVD-2017-05879)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the crypto/ccm.c file in Linux kernel versions 4.10.x prior to 4.10.12 and 4.9.x. The vulnerability can be exploited by a local...

CVE-2017-8065

CVE-2017-8065 affects the Linux kernel (4.9.x and 4.10.x up to 4.10.12). The issue arises from how crypto/ccm.c interacts with CONFIG_VMAP_STACK, enabling a local attacker to cause a denial of service (system crash or memory corruption) by leveraging use of more than one virtual page for a DMA sc...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

Linux kernel crypto/ahash.c denial of service vulnerability

Linux kernel is an open source operating system. Linux kernel has a security vulnerability in the crypto/ahash.c file. An attacker can exploit the vulnerability to submit a special request to crash the system...

CVE-2017-7618

A vulnerability was found in crypto/ahash.c in the Linux kernel which allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...

Google Android NVIDIA Crypto Driver elevation of privilege vulnerability (CNVD-2017-05726)

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in the Google Android NVIDIA Crypto Driver, which can be exploited by an attacker to execute arbitrary code in the kernel context...

Google Android Qualcomm Crypto Engine Driver Elevation of Privilege Vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in the Google Android Qualcomm Crypto Engine Driver. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the kernel context...

Google Android NVIDIA Crypto Driver Elevation of Privilege Vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in the Google Android NVIDIA Crypto Driver, which can be exploited by an attacker to execute arbitrary code in the kernel context...

Google Android Qualcomm crypto engine driver arbitrary code execution vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an arbitrary code execution vulnerability in the Qualcomm crypto engine driver implementation, which allows remote attackers to exploit the vulnerability by submitting a special request to...

Google Android NVIDIA Crypto Driver Information Disclosure Vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An information disclosure vulnerability exists in Google Android NVIDIA Crypto Driver. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android NVIDIA crypto driver information disclosure vulnerability (CNVD-2017-04706)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the NVIDIA crypto driver implementation, which allows remote attackers to exploit the vulnerability to submit special applications that can access sensitive information...

PT-2017-2371 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.10.9 Description: The issue is related to the crypto/ahash.c component in the Linux kernel, which can lead to a denial of service due to infinite recursion. This occurs when an attacker triggers EBUSY on a full...

CVE-2017-0576

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...