9129 matches found
CVE-2016-1732
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...
Memory corruption
IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...
Out-of-bounds
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...
CVE-2016-1732
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...
Multiple Apple products kernel memory corruption vulnerability
Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. kernel is one of the kernel...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20160323)
It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space...
Apple OS X AppleRAID Component Denial of Service Vulnerability
Apple OS X is a special operating system developed by Apple for Mac computers, of which AppleRAID is a disk array utility component. A security vulnerability exists in AppleRAID in versions of Apple OS X prior to 10.11.4. A local attacker could exploit this vulnerability to determine the layout o...
Apple OS X kernel memory corruption vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the kernel of Apple OS X versions prior to 10.11.4. The vulnerability can be exploited by an attacker with a specially crafted application ...
PT-2016-1558
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple tvOS versions prior to 9.2 Apple watchOS versions prior to 2.2 Description The issue is related to the IOHIDFamily component in Apple operating systems, which lacks...
PT-2016-1572
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.4 Description The issue allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors. It is caused by a buffer overflow in th...
CVE-2016-1748: Exposure of Sensitive Information to an Unauthorized Actor
IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...
CVE-2016-1732: Improper Restriction of Operations within the Bounds of a Memory Buffer
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...
kernel: pipe buffer state corruption after unsuccessful atomic read from pipe
It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space...
About the security content of iOS 9.3
About the security content of iOS 9.3 This document describes the security content of iOS 9.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn mo...
PT-2018-6363
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.14.8 Linux Kernel versions prior to 4.4.114 Description: The issue allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP...
PT-2016-4076
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue allows local users to obtain sensitive information from kernel memory by reading a tty data structure, specifically through the tty set termios ldisc function in drivers/tty/tty ldisc.c...
openafs -- multiple vulnerabilities
The OpenAFS development team reports: Foreign users can bypass access controls to create groups as system:administrators, including in the user namespace and the system: namespace. The contents of uninitialized memory are sent on the wire when clients perform certain RPCs. Depending on the RPC, t...
DLA-439-1 linux-2.6 - security update
Bulletin has no description...
CVE-2016-2383
The adjustbranches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions...
CVE-2015-8575
The scosockbind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application...