Security Bulletin: IBM MQ and IBM MQ Appliance invalid requests cause denial of service to SDR and CLUSSDR channels (CVE-2017-1285)

Summary An authenticated user with authority to send a specially crafted message could cause a SDR or CLUSSDR channel to remain in a running state but not process messages. Vulnerability Details CVEID: CVE-2017-1285 DESCRIPTION: IBM MQ could allow an authenticated user with authority to send a...

CVE-2018-13567

The mintToken function of a smart contract implementation for SDR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13567

The mintToken function of a smart contract implementation for SDR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13567

The CVE-2018-13567 entry describes an integer overflow in the mintToken function of a smart-contract implementation for SDR, an Ethereum token. The underlying issue allows the contract owner to set an arbitrary user’s balance to any value, implying a balance manipulation vulnerability. The connec...

CVE-2018-13567: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for SDR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-11951

Name of the Vulnerable Software and Affected Versions SDR token smart contract implementation affected versions not specified Description The issue concerns an integer overflow in the mintToken function of the smart contract implementation. This overflow allows the contract owner to set the balan...

sdrtrunk - Tool For Decoding, Monitoring, Recording And Streaming Trunked Mobile And Related Radio Protocols Using Software Defined Radios (SDR)

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios SDR. Getting Started User's Manual Version 0.3.0 Download Support Figure 1: sdrtrunk Version 0.3.0 Application Screenshot End User...

Salamandra - Spy Microphone Detection Tool

Salamandra is a tool to detect and locate spy microphones in closed environments. It find microphones based on the strength of the signal sent by the microphone and the amount of noise and overlapped frequencies. Based on the generated noise it can estimate how close or far away you are from the...

Spy Microphone Detection Tool: Salamandra

Salamandra is a tool to detect and locate spy microphones in closed environments. It find microphones based on the strength of the signal sent by the microphone and the amount of noise and overlapped frequencies. Based on the generated noise it can estimate how close or far away you are from the...

CVE-2017-17910

On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The intercepti...

Design/Logic Flaw

On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The intercepti...

CVE-2017-17910

On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The intercepti...

CVE-2017-17910

The CVE-2017-17910 issue affects Hoermann BiSecur devices (HS5-868-BS, HSE1-868-BS, HSE2-868-BS) before 2018. A attacker can capture a single radio transmission to obtain the encrypted packet and a 32-bit serial number, then derive the encryption key due to AES-128 using a static IV and static da...

IBM WebSphere MQ 9.0.1 < 9.0.3 Multiple Vulnerabilities

According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is 9.0.1 or 9.0.2 prior to 9.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to the insecure transmission of credentials in...

libreoffice: Container-overflow in sdr::table::TableLayouter::SetBorder

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6212501970616320 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

SDR Touch - Live offline radio - Native code usage, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application SDR Touch - Live offline radio published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 20 Update: gqrx-2.2.0-6.fc20

Gqrx is a software defined radio receiver powered by the GNU Radio SDR framework and the Qt graphical toolkit...

IBM Scalable POWERparallel (SP) 2.0 sdrd Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/371/info There is a vulnerability in the System Data Repository SDR subsystem. The SDR subsystem is used in IBM SP multi-machine parallel processing environments typically associated with Super Computing. The SDR is...

CentOS Update for OpenIPMI CESA-2013:0123 centos5

Check for the Version of OpenIPMI OpenVAS Vulnerability Test CentOS Update for OpenIPMI CESA-2013:0123 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

OpenIPMI security update

CentOS Errata and Security Advisory CESA-2013:0123 Updated OpenIPMI packages that fix one security issue, multiple bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common...