USN-3053-1: Linux kernel (Vivid HWE) vulnerabilities

A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before...

USN-3052-1: Linux kernel vulnerabilities

It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an error condition occurred. A local attacker could use this to cause a denial of service system crash. CVE-2016-4470 Kangjie Lu discovered an...

USN-3051-1: Linux kernel (Trusty HWE) vulnerabilities

It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an error condition occurred. A local attacker could use this to cause a denial of service system crash. CVE-2016-4470 Kangjie Lu discovered an...

USN-3050-1: Linux kernel (OMAP4) vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a Docker...

FreeBSD : FreeBSD -- Kernel memory disclosure in sctp(4) (dd48d9b9-5e7e-11e6-a6c3-14dae9d210b8)

Problem Description : When initializing the SCTP state cookie being sent in INIT-ACK chunks, a buffer allocated from the kernel stack is not completely initialized. Impact : Fragments of kernel memory may be included in SCTP packets and transmitted over the network. For each SCTP session, there a...

FreeBSD : FreeBSD -- integer overflow in IP_MSFILTER (0844632f-5e78-11e6-a6c3-14dae9d210b8)

Problem Description : An integer overflow in computing the size of a temporary buffer can result in a buffer which is too small for the requested operation. Impact : An unprivileged process can read or write pages of memory which belong to the kernel. These may lead to exposure of sensitive...

SUSE-SU-2016:2010-1 Security update for Linux Kernel Live Patch 11 for SLE 12

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

Android on Nexus Information Disclosure Vulnerability

Android on Nexus 6 and 7 is an open source operating system for the Nexus 6 and 7 smartphones based on Linux, developed by Google and the Open Handset Alliance OHA.The Linux kernel is the kernel used by the Linux Foundation's operating system Linux. Linux kernel is the kernel used by the operatin...

Multiple Apple products kernel memory corruption vulnerability (CNVD-2016-05663)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. kernel is one of the kernel...

Apple iOS and watchOS IOAcceleratorFamily Information Disclosure Vulnerability

Apple iOS is a suite of operating systems developed for mobile devices.Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. A security vulnerability in IOAcceleratorFamily in Apple iOS allows local attackers to exploit the vulnerability to gain...

Apple OS X Audio Out-of-Bounds Read Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Audio is one of the audio components. A security vulnerability exists in Audio in Apple OS X versions prior to 10.11.6. A local attacker could exploit this vulnerability to obtain sensitive kernel memory-layout...

Apple OS X CoreGraphics Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.CoreGraphics is a built-in graphics framework for iOS. A security vulnerability exists in CoreGraphics in Apple OS X versions prior to 10.11.6. A local attacker could exploit this vulnerability to obtain sensitive...

kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko

A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write as bi-directional ioctl replacement, which could lead to insufficient memory security checks when being invoked using the splice system call. A local unprivileged user on a system with either...

CVE-2016-4652

CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service out-of-bounds read, via unspecified vectors...

CVE-2016-4652

CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service out-of-bounds read, via unspecified vectors...

CVE-2016-4648

Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

Out-of-bounds

CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service out-of-bounds read, via unspecified vectors...

Out-of-bounds

Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-4628

IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read via unspecified vectors...