Broadcom: Stack buffer overflow when parsing CCKM reassociation response(CVE-2017-6957)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. In order to allow fast roaming between access...

CVE-2017-6957

CVE-2017-6957 is a stack-based buffer overflow in Broadcom Wi‑Fi HardMAC SoC firmware (notably BCM4339) when handling Cisco CCKM Fast and Secure Roaming. In affected firmware, the reassociation response frame containing Cisco IE 156 is parsed and a length field derived from IE[20]:IE[21] can over...

CVE-2017-6957: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE 156...

PT-2017-17424

Name of the Vulnerable Software and Affected Versions Broadcom Wi-Fi HardMAC SoC chips affected versions not specified Description The issue is a stack-based buffer overflow in the firmware of Broadcom Wi-Fi HardMAC SoC chips. This occurs when the firmware supports CCKM Fast and Secure Roaming an...

Get Followers Fast - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers Fast published at the 'play' market has multiple vulnerabilities...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:0718-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-10155: The virtual hardware watchdog 'wdti6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host bsc1024183 -...

CVE-2017-6444: Uncontrolled Resource Consumption

The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service CPU consumption by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 10...

Fast Browser - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Browser published at the 'play' market has multiple vulnerabilities...

Dolphin Jetpack - Fast & Flash - Customized SSL, Dangerous filesystem permissions, Insecure SSL socket vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Jetpack - Fast & Flash published at the 'play' market has multiple vulnerabilities...

Ace Browser – Fast, AdBlock - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ace Browser – Fast, AdBlock published at the 'play' market has multiple vulnerabilities...

Fast Browser - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fast Browser published at the 'play' market has multiple vulnerabilities...

5G Speed Fast Browser HD - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 5G Speed Fast Browser HD published at the 'play' market has multiple vulnerabilities...

Super Fast Browser - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Super Fast Browser published at the 'play' market has multiple vulnerabilities...

Power Browser - Fast Internet - Dangerous filesystem permissions, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Power Browser - Fast Internet published at the 'play' market has multiple vulnerabilities...

Maxthon Browser - Fast&abp - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Maxthon Browser - Fast&abp published at the 'play' market has multiple vulnerabilities...

Download Manager Fast - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager Fast published at the 'play' market has multiple vulnerabilities...

Fast Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Download Manager published at the 'play' market has multiple vulnerabilities...

Opera Mini - fast web browser - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Opera Mini - fast web browser published at the 'play' market has multiple vulnerabilities...

Denial of Service Vulnerability in Multiple F5 BIG-IP Products (CNVD-2017-01192)

F5 BIG-IP is the popular load balancer. An unspecified security vulnerability exists in F5 BIG-IP, where submitting a special request can cause TMM to restart when TCP FAST OPEN is enabled...

CVE-2016-9249

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...