PT-2016-7153

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue is related to an integer overflow in the net tx pkt init function, which can cause a denial of service. This happens when the maximum fragmentation count triggers an...

USN-3057-1 linux-snapdragon vulnerabilities

Ben Hawkes discovered an integer overflow in the Linux netfilter implementation. On systems running 32 bit kernels, a local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges. CVE-2016-3135 It was...

USN-3056-1 linux-raspi2 vulnerabilities

Ben Hawkes discovered an integer overflow in the Linux netfilter implementation. On systems running 32 bit kernels, a local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges. CVE-2016-3135 It was...

USN-3055-1 linux vulnerabilities

Ben Hawkes discovered an integer overflow in the Linux netfilter implementation. On systems running 32 bit kernels, a local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges. CVE-2016-3135 It was...

DEBIAN-CVE-2014-9892

The sndcomprtstamp function in sound/core/compressoffload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted applicatio...

PT-2016-2593

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 Description The issue is related to the ioresources init function in the Linux kernel, which uses weak permissions for the /proc/iomem file. This allows local users to obtain sensitive information by reading...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.

The Linux operating system contains a vulnerability related to errors in the implementation of the pinginitsock function in the original operating system code. Exploiting this vulnerability allows for denial of service or increases privileges by using an incorrect pointer counter in that function...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the implementation of the Bluetooth RFCOMM kernel in Linux, due to incorrect initialization of certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s memory through a specially crafted application...

PT-2016-4495

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.11.0 Description The issue is related to improper checks of return values from gnutls x509 crt init and gnutls x509 crt import functions when importing X.509 certificates, potentially leading to code execution. This...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the rootdir/init.rc function in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

Linux kernel denial of service vulnerability (CNVD-2016-02788)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'digiportinit' function in the drivers/usb/serial/digiacceleport.c file in Linux kernel versions prior to 4.5.1. An attacker ca...

UBUNTU-CVE-2016-3140

The digiportinit function in drivers/usb/serial/digiacceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a crafted endpoints value in a USB device descriptor...

PT-2016-5383

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue allows physically proximate attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash. This is achieved via a crafted endpoints value in a USB...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the libavcodec/gif.c function in the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other effects by using a specially created .tga file related to the functions...

ALPINE-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

DEBIAN-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

iptables-persistent '/etc/iptables' local information disclosure vulnerability

iptables-persistent is an init.d script used to make iptables rules restart continuously. A security vulnerability exists in iptables-persistent, which allows local attackers to exploit the vulnerability to obtain sensitive information...

PT-2015-7843

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted tar file. This crafted file triggers an invalid left shift in the compress bidder init...

PT-2015-3157

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.3 Description The issue is related to the h264 slice header init function in libavcodec/h264 slice.c, which does not properly validate the relationship between the number of threads and the number of slices. This c...

PT-2015-7772

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.6.5 FFmpeg versions 2.7.x prior to 2.7.3 FFmpeg versions 2.8.x through 2.8.2 Description The issue is related to an integer overflow in the ff ivi init planes function, which can be triggered by crafted image...