SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2016:0884-1)

ghostscript was updated to fix one security issue and one bug. The following vulnerability was fixed : - CVE-2015-3228: Specially crafted ps files could have caused an out of bound read/write due to an integer overflow, causing a segfault in the application or having unspecified further impact...

SUSE-SU-2016:0884-1 Security update for ghostscript

ghostscript was updated to fix one security issue and one bug. The following vulnerability was fixed: CVE-2015-3228: Specially crafted ps files could have caused an out of bound read/write due to an integer overflow, causing a segfault in the application or having unspecified further impact. Also...

OpenSSH 7.2p1 - Authenticated xauth Command Injection

Exploit for multiple platform in category remote exploits ''' Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 Version: 0.2 Date: Mar 3rd, 2016 Tag: openssh xauth command injection may lead to forced-command and /bin/false bypass Overview -------- Name: openssh Vendor:...

UBUNTU-CVE-2016-2546

sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition, use-after-free, and system crash via a crafted ioctl call...

openSUSE Security Update : glibc (openSUSE-2016-233)

This update for glibc fixes the following issues : - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex boo956716, BZ 17514 - reinitialize-dlloadwritelock.patch: Reinitialize dlloadwritelock on fork boo958315, BZ 19282 - send-dg-buffer-overflow.patch: Fix...

CVE-2015-1136

Use-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code by leveraging improper use of a mutex...

CVE-2015-1136

CVE-2015-1136 – Apple OS X CoreAnimation UAF flaw : A use-after-free in CoreAnimation (OS X before 10.10.3) allows remote code execution via improper mutex handling. Affected: Apple OS X versions earlier than 10.10.3. Impact per sources: arbitrary code execution and partial information disclosure...

New Technique Complicates Mutex Malware Analysis

Malware analysts have had a measure of success using static mutex values as a fingerprint for detecting and blocking malicious code. These values are used in programming to enable software to synchronize communication between multiple threads or processes, or to determine whether another instance...

SuSE 11.3 Security Update : glibc (SAT Patch Number 10259)

glibc has been updated to fix security issues and bugs : - Fix crashes on invalid input in IBM gconv modules. CVE-2014-6040 / CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Avoid infinite loop in nssdns getnetbyname. CVE-2014-9402 - Don't touch user-controlled stdio locks i...

OracleVM 3.3 : glibc (OVMSA-2014-0017)

The remote OracleVM system is missing necessary patches to address critical security updates : - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, - Don't use alloca in addgetnetgrentX 1087789. - Adjust...

Linux Kernel 2.6.29 - ptrace_attach() Local Root Race Condition Exploit

No description provided by source. / GNU/Linux kernel 2.6.29 ptraceattach local root race condition exploit. ========================================================================== This is a local root exploit for the 2.6.29 ptraceattach race condition that allows a process to gain elevated...

Agnitum Outpost Firewall 4.0 Outpost_IPC_HDR Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24284/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users. This issue affects Outpost Firewall 4....

Microsoft Windows NT 4.0 Networking Mutex DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2303/info Microsoft Windows NT 4.0 is subject to a denial of service due to the implementation of incorrect permissions in a Mutex object. A local user could gain control of the Mutex on a networked machine and deny all...

Apple Mac OS X 10.5.x 'ptrace' Mutex Handling Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service t...

win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase

No description provided by source. I'm quite proud of this list cycle trick, here's how to turn it into an arbitrary write. First, we create a watchdog thread that will patch the list atomically when we're ready. This is needed because we can't exploit the bug while HeavyAllocPool is failing,...

CVE-2014-2580

The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service "scheduling while atomic" error and host crash via a malformed packet, which causes a mutex to be taken when trying to disable...

Design/Logic Flaw

The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service "scheduling while atomic" error and host crash via a malformed packet, which causes a mutex to be taken when trying to disable...

SuSE 11.3 Security Update : glibc (SAT Patch Number 8337)

This update for glibc contains the following fixes : - Fix integer overflows in malloc. CVE-2013-4332, bnc839870 - Fix buffer overflow in glob. bnc691365 - Fix buffer overflow in strcoll. CVE-2012-4412, bnc779320 - Update mount flags in . bnc791928 - Fix buffer overrun in regexp matcher...

SuSE 11.2 Security Update : glibc (SAT Patch Number 8335)

This update for glibc contains the following fixes : - Fix integer overflows in malloc. CVE-2013-4332, bnc839870 - Fix buffer overflow in glob. bnc691365 - Fix buffer overflow in strcoll. CVE-2012-4412, bnc779320 - Update mount flags in . bnc791928 - Fix buffer overrun in regexp matcher...

CVE-2013-3464

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...