CVE-2016-9313

security/keys/bigkey.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service NULL pointer dereference and panic or possibly have unspecified other impact via a crafte...

CVE-2016-9313

security/keys/bigkey.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service NULL pointer dereference and panic or possibly have unspecified other impact via a crafte...

UBUNTU-CVE-2016-9313

security/keys/bigkey.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service NULL pointer dereference and panic or possibly have unspecified other impact via a crafte...

CVE-2016-6738

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2016-6738

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

Privilege escalation

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2016-6738

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

UBUNTU-CVE-2016-6738

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

UBUNTU-CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

CVE-2016-6725

CVE-2016-6725 is a remote-code-execution vulnerability in the Qualcomm crypto driver affecting Android before the 2016-11-05 patch level. The Android kernel context could be compromised by a remote attacker, with CVSS-style impact described as critical (kernel context, remote exploit). The vulner...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

Linux Kernel 'crypto/algif_hash.c' Local Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux Kernel 'crypto/algifhash.c' has a local denial of service vulnerability that can be exploited by an attacker to crash an application, resulting in a denial of service...

Linux Kernel 'crypto/lrw.c' Local Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the Linux Kernel 'crypto/lrw.c' script. A local attacker could exploit this vulnerability to cause a denial of service...

Google Nexus Qualcomm Crypto Engine Driver Elevation of Privilege Vulnerability

Google Nexus 5X and others are smart devices from Google USA.Qualcomm crypto engine is one of the Qualcomm crypto engine drivers. An elevation of privilege vulnerability exists in the Qualcomm crypto engine driver in Google products. An attacker can exploit this vulnerability to execute arbitrary...

PT-2016-7732 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.7 Description: The issue is related to the mishandling of unsuccessful crypto registration in conjunction with successful key-type registration. This can be exploited by local users to cause a denial of...

Google Nexus Qualcomm Crypto Driver Remote Code Execution Vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X smart device, etc. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. A remote...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...