Linux Kernel 'crypto/algif_hash.c' Local Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux Kernel 'crypto/algifhash.c' has a local denial of service vulnerability that can be exploited by an attacker to crash an application, resulting in a denial of service...

PT-2016-7732 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.7 Description: The issue is related to the mishandling of unsuccessful crypto registration in conjunction with successful key-type registration. This can be exploited by local users to cause a denial of...

Google Nexus Qualcomm Crypto Engine Driver Elevation of Privilege Vulnerability

Google Nexus 5X and others are smart devices from Google USA.Qualcomm crypto engine is one of the Qualcomm crypto engine drivers. An elevation of privilege vulnerability exists in the Qualcomm crypto engine driver in Google products. An attacker can exploit this vulnerability to execute arbitrary...

Linux Kernel 'crypto/lrw.c' Local Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the Linux Kernel 'crypto/lrw.c' script. A local attacker could exploit this vulnerability to cause a denial of service...

Google Nexus Qualcomm Crypto Driver Remote Code Execution Vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X smart device, etc. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. A remote...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

[SECURITY] Fedora 24 Update: kleopatra-16.08.2-1.fc24

KDE certificate manager and unified crypto GUI...

[ASA-201610-8] crypto++: information disclosure

Arch Linux Security Advisory ASA-201610-8 ========================================= Severity: Medium Date : 2016-10-12 CVE-ID : CVE-2016-7420 Package : crypto++ Type : information disclosure Remote : No Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package crypto++ before...

CVE-2016-3901

CVE-2016-3901 affects the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) in Android. It describes multiple integer overflows that enable a local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is integer overfl...

StrongPity APT Covets Secrets of Crypto Users

APT groups covet secrets, and one in particular has chosen to target users intent on protecting theirs. The group is known as StrongPity, and it’s been a characteristic APT outfit using its share of zero days and modular attack tools to infiltrate victims and conduct espionage. This summer,...

Windows Crypto Ransomware in Go: Ransomware

Windows Crypto Ransomware in Go Ransomware is a type of malware that prevents or limits users from accessing their system, either by locking the system’s screen or by locking the users’ files unless a ransom is paid. More modern ransomware families, collectively categorized as crypto-ransomware,...

Crypto++ Denial of Service Vulnerability

Crypto++ aka cryptopp is a free C++ library. A denial of service vulnerability exists in Crypto++ version 5.6.4. An attacker can exploit this vulnerability to cause the application to crash, resulting in a denial of service...

MorphAES - IDPS & SandBox & AntiVirus STEALTH KILLER

MorphAES is the world's first polymorphic shellcode/malware engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent. Properties: Polymorphism AES encryption Metamorphism logic and constant...

Crypto++ Information Disclosure Vulnerability

Crypto++ aka cryptopp is a free C++ library. A security vulnerability exists in Crypto++ 5.6.4 and earlier versions, which can be exploited by an attacker to obtain sensitive information by accessing process memory...

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

DEBIAN-CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

Design/Logic Flaw

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...