CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

CVE-2019-5213 affects Huawei Honor Play Cornell-AL00A devices running versions earlier than 9.1.0.321 (C00E320R1P1T8). The issue stems from a logic judgment error that enables an attacker to modify alarm clock settings without unlocking the screen. Huawei PSIRT notes the vulnerability and has rel...

CVE-2019-10524

CVE-2019-10524 involves a lack of validation for a negative value returned by get_clk, which is misinterpreted as a valid pointer, causing a use-after-free in the Qualcomm clk driver across numerous Snapdragon platforms (e.g., Snapdragon Auto/Mobile/IoT variants). The issue enables local exploita...

Security Advisory - Insufficient Authentication Vulnerability in Several Smartphones

There is an insufficient authentication vulnerability on several smartphones. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock...

PT-2019-4396 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: The issue is related to a memory leak in the clock source create function under /gpu/drm/amd/display/dc in the Linux kernel. This leak can be exploited by a remote attacker to cause a denial o...

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019 Summary This update includes the quality improvements from KB4493467, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that causes th...

Update for Windows Server 2012: April 25, 2019

Update for Windows Server 2012: April 25, 2019 Summary This update includes the quality improvements from KB4493450, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that causes the Date and Time...

DEBIAN-CVE-2019-12455

An issue was discovered in sunxidivsclksetup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derivedname, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: This id is disputed as not...

UBUNTU-CVE-2019-12455

An issue was discovered in sunxidivsclksetup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derivedname, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: This id is disputed as not...

PT-2019-12802 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.1.5 Description: An issue was discovered in the sunxi divs clk setup function in drivers/clk/sunxi/clk-sunxi.c. There is an unchecked kstrndup of derived name, which might allow an attacker to cause a denial of...

PT-2020-8985 · Ntp +4 · Ntp +4

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p10 through 4.2.8p13 Description: The issue allows remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a...

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...

April 25, 2019—KB4493460 (Preview of Monthly Rollup)

None None...

April 25, 2019—KB4493443 (Preview of Monthly Rollup)

None None...

April 25, 2019—KB4493462 (Preview of Monthly Rollup)

None None...

Google Chrome < M73 - MidiManagerWin Use-After-Free Exploit

Google Chrome M73 - MidiManagerWin Use-After-Free Exploit MidiManagerWin uses a similar instanceid mechanism to the TaskService implementation to ensure that delayed tasks are only executed if the MidiManager instance that they were scheduled on is still alive. However, this instanceid is an int,...

February 19, 2019—KB4487016 (Preview of Monthly Rollup)

None None...

Time not getting sync on XenServer with NTP

High NTP offset and jitter while delay is low. This can be seen with "ntpq -p". Offset is the time difference between the local server and remote Jitter is the difference between the last and current offset measurements, thus if it is high, it means that the offset is increasing more over time...