Security update for the Microsoft Bluetooth driver spoofing vulnerability in Windows Server 2008: September 12, 2017

Security update for the Microsoft Bluetooth driver spoofing vulnerability in Windows Server 2008: September 12, 2017 Summary A spoofing vulnerability exists in the Microsoft implementation of the Bluetooth stack. An attacker who successfully exploits this vulnerability could perform a...

KLA11899 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information...

KLA11099 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of...

Intel® Wireless Bluetooth® Driver Unquoted Service Path - us

Lenovo Security Advisory: LEN-11158 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8102 Summary Description: A denial of service vulnerability exists in the Intel® Wireless Bluetooth® Driver for Microsoft Windows. These drivers are...

CVE-2014-8837

Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

Code injection

Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2014-8836

CVE-2014-8836 affects Apple OS X Bluetooth driver and can allow arbitrary code execution in a privileged context or cause kernel memory DoS when running a crafted app. Documented impact is for OS X Yosemite (10.10.x) prior to 10.10.2; remediation is Apple security updates (OS X 10.10.2 and Securi...

CVE-2014-8836

The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service arbitrary-size bzero of kernel memory via a crafted app...

CVE-2014-8837

Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

Apple MAC OS X Yosemite Bluetooth Driver Arbitrary Code Execution Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. An arbitrary code execution vulnerability exists in the Apple MAC OS X Yosemite Bluetooth driver, which can be exploited by a local attacker to execute arbitrary code...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2605)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12677)

This patch updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security issues were fixed : - The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel did not verify whether the tty has a write...

kernel: missing tty ops write function presence check in hci_uart_tty_open()

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672)

This patch updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security issues were fixed : - The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel did not verify whether the tty has a write...

kernel: missing tty ops write function presence check in hci_uart_tty_open()

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

CVE-2010-4242

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

Null pointer dereference

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

CVE-2010-4242

CVE-2010-4242 affects the Linux kernel 2.6.36 (and possibly other versions). The vulnerability is in the HCI UART driver, specifically the hci_uart_tty_open function in drivers/bluetooth/hci_ldisc.c, which does not verify if the tty has a write operation. This can allow a local user to cause a de...

CVE-2010-4242

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...

CVE-2010-4242

The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service NULL pointer dereference via vectors related to the...