USN-3099-1: Linux kernel vulnerabilities

Vladimír Beneš discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote attacker could use this to cause a stack corruption, leading to a denial of service system crash. CVE-2016-7039 Marco Grassi discovered a...

USN-3097-1: Linux kernel vulnerabilities

Marco Grassi discovered a use-after-free condition could occur in the TCP retransmit queue handling code in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2016-6828 Pengfei Wang discovered a race condition in the...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3099-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3099-4 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

CVE-2016-6679

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

CVE-2016-6675

Off-by-one error in CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a linkspeed ioctl call, aka Android...

CVE-2016-6675

Off-by-one error in CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a linkspeed ioctl call, aka Android...

CVE-2016-6676

CVE-2016-6676 is an off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c of the Qualcomm Wi‑Fi driver affecting Android on Nexus 5X and Android One devices prior to 2016-10-05. The vulnerability allows a local attacker to gain privileges or cause a denial of service (buffer overflow) by a crafted appl...

CVE-2016-6680

CORE/HDD/src/wlanhddwext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iwsetpriv ioctl call, aka Android internal bug 29982678 and Qualcomm internal bug CR...

CVE-2016-6679

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

PT-2016-7037

Name of the Vulnerable Software and Affected Versions Qualcomm Wi-Fi driver versions prior to 2016-10-05 Description The issue is related to an off-by-one error in the CORE/HDD/src/wlan hdd cfg.c file of the Qualcomm Wi-Fi driver. This error can be exploited by attackers via a crafted application...

CVE-2016-6676: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in CORE/HDD/src/wlanhddcfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a GETCFG ioctl call, aka Android intern...

CVE-2016-6679: Exposure of Sensitive Information to an Unauthorized Actor

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

CVE-2016-6680: Exposure of Sensitive Information to an Unauthorized Actor

CORE/HDD/src/wlanhddwext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iwsetpriv ioctl call, aka Android internal bug 29982678 and Qualcomm internal bug CR...

PT-2016-7041

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue allows attackers to obtain sensitive information via a crafted application that makes an iw set priv ioctl call. This is related to the Qualcomm Wi-Fi driver in Android. Recommendation...

CVE-2016-6675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a linkspeed ioctl call, aka Android...

PT-2016-7040

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call. This affects Android devices, specifically Nexus 5X and Android One devices...

DLA-638-1 policycoreutils - security update

Bulletin has no description...

Linux kernel DoS

The vulnerability of the sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c file, a audio driver for the MSM QDSP6 core of the Linux operating system, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause service failures or other...

PT-2016-5723

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-09-05 on Nexus 6P devices Description The issue is related to the wcdcal hwdep ioctl shared function in the Qualcomm sound codec, which does not properly copy firmware data. This allows attackers to obtain...

Bitdefender Antivirus Plus bdfwfpf Elevation of Privilege Vulnerability

Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus has a security vulnerability in bdfwfpf processing 0x8000e038 IOCTL. An attacker could exploit this vulnerability to elevate its privileges on the target system...