CVE-2019-8698

CVE-2019-8698 affects Apple Profiles component entitlement verification. A validation issue could allow a malicious app to restrict access to websites. Apple fixed the issue in iOS 12.4 and tvOS 12.4; remediation is updating to these versions. The surrounding Apple security documentation explicit...

PT-2019-19231 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.1 Description: A validation issue existed in the entitlement verification, allowing an application to potentially execute arbitrary code with system privileges. This issue was addressed with improved validation o...

CVE-2013-4518

RHUI Red Hat Update Infrastructure 2.1.3 has world readable PKI entitlement certificates...

CVE-2013-4518

Affected product: RHUI (Red Hat Update Infrastructure) 2.1.3. The vulnerability involves world‑readable PKI entitlement certificates, enabling information disclosure of sensitive PKI data. Root cause details are not fully specified in the provided documents, but the CNVD entry explicitly notes an...

Fedora Update for subscription-manager FEDORA-2018-075821dc8f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-4321

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12...

CVE-2018-4321

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12...

Input validation

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12...

CVE-2018-4321

CVE-2018-4321 involves a validation issue in the entitlement verification which affected Apple platforms prior to their patches: iOS 12, macOS Mojave 10.14, and tvOS 12. The issue was addressed with improved validation of the process entitlement. Affected components are tied to the entitlement ve...

CVE-2018-4321

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12...

iOS < 12.2 / macOS < 10.14.4 XNU - pidversion Increment During execve is Unsafe

Privileged IPC services in userspace often have to verify the security context of their client processes such as whether the client is sandboxed, has a specific entitlement, or is signed by some code signing authority. This, in turn, requires a way to identify a client process. If PIDs are used f...

[SECURITY] Fedora 29 Update: subscription-manager-1.24.2-1.fc29

The Subscription Manager package provides programs and libraries to allow u sers to manage subscriptions and yum repositories from the Red Hat entitlement platform...

[SECURITY] Fedora 28 Update: subscription-manager-1.24.2-1.fc28

The Subscription Manager package provides programs and libraries to allow u sers to manage subscriptions and yum repositories from the Red Hat entitlement platform...

[SECURITY] Fedora 27 Update: subscription-manager-1.24.2-1.fc27

The Subscription Manager package provides programs and libraries to allow u sers to manage subscriptions and yum repositories from the Red Hat entitlement platform...

Apple iOSmacOS - Kernel Memory Corruption due to Integer Overflow in IOHIDResourceQueue::enqueueReport

Apple iOSmacOS - Kernel Memory Corruption due to Integer Overflow in IOHIDResourceQueue::enqueueReport / IOHIDResourceQueue inherits from IOSharedDataQueue and adds its own ::enqueueReport method, which seems to be mostly copy-pasted from IOSharedDataQueue and IODataQueue's ::enqueue methods. I...

HPE Device Entitlement Gateway SQL Injection Vulnerability

HPE Device Entitlement Gateway DEG is a set of device entitlement management solutions from Hewlett Packard Enterprise HPE. A SQL injection vulnerability exists in HPE DEG versions 3.2.4, 3.3, and 3.3.1, which can be exploited by remote attackers to inject SQL commands and elevate privileges...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

CVE-2018-4229

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...