SUSE-SU-2016:1035-1 Security update for Linux Kernel Live Patch 2 for SP 1

This update for the Linux Kernel 3.12.51-60.25.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. bsc967773 - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kerne...

SUSE-SU-2016:1034-1 Security update for Linux Kernel Live Patch 11

This update for the Linux Kernel 3.12.51-52.39.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. bsc967773 - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kerne...

PT-2016-5381 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.1 Description: The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, via a USB device without both a control and a data...

PT-2016-5661

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash. This can be achieved via a USB device without both a master and a slave interface,...

PT-2016-5051

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved by using a crafted endpoints value i...

PT-2016-5050

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved by using a crafted endpoints value i...

PT-2016-5383

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash. This is achieved via a crafted endpoints value in a USB...

PT-2016-5379

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, via a crafted USB device without two interrupt-in endpoint...

PT-2016-5049

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, potentially leading to a system crash, by exploiting a crafted endpoints value in a USB device descriptor. This is d...

Linux kernel usbnet driver denial of service vulnerability

Linux kernel is an open source operating system. usbnet is one of the drivers used to create network card devices on USB devices. A denial of service vulnerability exists in the Linux kernel's usbnet driver, which allows a local attacker to conduct denial of service attacks by inserting a USB...

CVE-2016-1734

AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted USB device...

Memory corruption

AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted USB device...

CVE-2016-1734

CVE-2016-1734 affects AppleUSBNetworking in iOS before 9.3 and OS X before 10.11.4. The issue arises from an error handling/packet validation weakness in the AppleUSBNetworking stack, enabling physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of se...

About the security content of iOS 9.3

About the security content of iOS 9.3 This document describes the security content of iOS 9.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn mo...

USN-2929-1 linux vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) - 'snd-usb-audio' Crash (PoC)

Exploit for linux platform in category dos / poc Linux snd-usb-audio Multiple Free Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes...

Linux Kernel 3.10.0-229.x (CentOS RHEL 7.1) - snd-usb-audio Crash (PoC)

Linux Kernel 3.10.0-229.x CentOS RHEL 7.1 - snd-usb-audio Crash PoC OS-S Security Advisory 2016-17 Linux snd-usb-audio Multiple Free Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Title: Local RedHat...

Linux Kernel 3.10.0-229.x (CentOS RHEL 7.1) - iowarrior Driver Crash (PoC)

Linux Kernel 3.10.0-229.x CentOS RHEL 7.1 - iowarrior Driver Crash PoC OS-S Security Advisory 2016-15 Linux iowarrior Nullpointer Dereference Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Title: Local...

Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) - 'snd-usb-audio' Crash (PoC)

OS-S Security Advisory 2016-17 Linux snd-usb-audio Multiple Free Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes multiple free on...

Linux snd-usb-audio Denial Of Service

OS-S Security Advisory 2016-17 Linux snd-usb-audio Multiple Free Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Title: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes multiple free on invali...