Denial of service

A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android...

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

CVE-2017-0534

An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

CVE-2017-0459

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

CVE-2017-0494

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

CVE-2017-0537

An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18...

CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

RHEL 7 : rpm-ostree and rpm-ostree-client (RHSA-2017:0444)

An update for rpm-ostree and rpm-ostree-client is now available for Red Hat Enterprise Linux Atomic Host 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Virtuozzo Linux Errata and Security Advisory 2017:0388 Moderate

Upstream security update. Follow RHSA-2017-0388 for details...

CentOS 6 / 7 : openssl (CESA-2017:0286)

An update for openssl is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 6 / 7 : openssl (RHSA-2017:0286)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0286 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

Virtuozzo Linux Errata and Security Advisory 2017:0286 Moderate

Upstream security update. Follow RHSA-2017-0286 for details...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in Qualcomm’s components, including the camera driver and video driver, as well as the Android operating system, is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a remote attacker to gain access to data at levels beyond their authoriz...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s networking subsystem is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “moderate,” as ...

The vulnerability of the Android operating system, which allows a hacker to gain access to system functions

The vulnerability in the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to gain access to system functions beyond their intended scope. This issue is considered “moderate,” as it involves circumventing local restrictions on a...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

Vulnerabilities of kernel components, including the ION subsystem, Binder, USB driver, and the network subsystem of the Android operating system, are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to gain access to local maliciou...

The vulnerability of the Android operating system, which allows a hacker to bypass the security measures of the operating system

The vulnerability in the Android operating system’s package manager is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the operating system’s defenses, which typically isolate malicious applications from other applications. This...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in Qualcomm’s components, including the camera driver and video driver, as well as the Android operating system, is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a remote attacker to gain access to data at levels beyond their authoriz...

CentOS 7 : bind (CESA-2017:0276)

"An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...