39 matches found
Interface Aware Fuzzing for Kernel Drivers: DIFUZE
Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...
SUSE-SU-2017:1617-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000364: The default stack guard page was too small and could be 'jumped over' by userland programs using more than one page of stack in functions and s...
Apple releases 'Emergency' Patch after Advanced Spyware Targets Human Rights Activist
Apple has released iOS 9.3.5 update for iPhones and iPads to patch three zero-day vulnerabilities after a piece of spyware found targeting the iPhone used by a renowned UAE human rights defender, Ahmed Mansoor. One of the world's most invasive software weapon distributors, called the NSO Group, h...
More Mac OS X and iPhone sandbox escapes and kernel bugs
Posted by Ian Beer A couple of weeks ago Apple released OS X 10.9.5 and iOS 8 which fixed a number of sandbox escapes and privilege escalation bugs found by Project Zero. All-bar-one of these bugs were found via manual source code auditing where there was source and binary analysis where there...
Apache 1.x/2.0.x Chunked-Encoding Memory Corruption Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer...
Scientific Linux Security Update : kernel on SL4.x i386/x86_64
These updated kernel packages fix the following security issue : A buffer overflow flaw was found in the CIFS virtual file system. A remote authenticated user could issue a request that could lead to a denial of service. CVE-2007-5904, Moderate As well, these updated packages fix the following bu...
USN-1111-1: Linux kernel vulnerabilities
Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...
Ubuntu 8.04 LTS : linux vulnerabilities (USN-1105-1)
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4075 Dan Rosenberg discovered that the socket filters did not correctly...
USN-1105-1: Linux kernel vulnerabilities
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4075 Dan Rosenberg discovered that the socket filters did not correctly...
Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types
Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...
Linux kernel multiple bugs
Race conditions in uselib leading to possibilityto overwrite kernel memory regions. Integer overflows in multiple drivers random poolsize, scsi ioctl, moxa. RLIMITMEMLOCK protection bypass. mlockall DoS. Privilege escalation with race conditions on page fault with SMP platforms...
Multiple Linux kernel bugs
DoS, privilege escalation, buffer overflow on 32bit calls emulation under 64bit platforms...
Multiple linux kernel IGMP processing bugs
DoS, kernel memory access...
Multiple Linux kernel bugs
ReiserFS DoS, hugetlbfs protection bypass...
Multiple linux kernel bugs
chown: users can change the group affiliation of arbitrary files to the group they belong to, missing DAC check in chown2: local privilege escalation, overflow with signals: local denial-of-service, pss, mpu401 sound driver: read/write to complete memory, airo driver: read/write to complete memor...
Linux kernel multiple bugs
cpufreq privilege escalation, multiple SCSI drivers weak permissions...
Multiple linux kernel bugs
/proc/tty/driver/serial kestroke counting information leak, multiple execve problems, multiple STP problems, UDP port spoofing, forwarding table records spoofing. ISO9660 file system buffer overflow...
Multiple bugs in linux kernel
new kernel version fixes DoS in TCP/IP stack by isuing amount of packets with same hash value and privelege escalation in ioperm call. mxcsr CPU state modification, TTY level DoS, multiple etherleaks...