kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko

A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write as bi-directional ioctl replacement, which could lead to insufficient memory security checks when being invoked using the splice system call. A local unprivileged user on a system with either...

Apple Launches Bug Bounty with Maximum $200,000 Reward

LAS VEGAS—Apple closed out Black Hat today with a long-awaited announcement that next month it will launch a bug bounty. The Apple Security Bounty will be an invitation-only program, open to two dozen researchers at the outset, said Ivan Krstic, head of security engineering and architecture. The...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06073)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

About the security content of iOS 9.3.4

About the security content of iOS 9.3.4 This document describes the security content of iOS 9.3.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06071)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06072)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06077)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability, which can be exploited by an attacker to elevate privileges and execute arbitrary code within the scope of using the kernel...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06074)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06075)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Apple iOS/tvOS/watchOS Local Lift Vulnerability

Apple iOS, tvOS, and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A local exploit exists in Apple iOS/tvOS/watchOS. A local attacker can exploit this...

Apple OS X IOPMrootDomain Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IOPMrootDomain. By...

Apple Fixes Vulnerabilities Across OS X, iOS, Safari

Apple fixed dozens of vulnerabilities in its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS. The OS X update graduates the desktop and server operating system to OS X El Capitan v10.11.6 and applies to anyone running OS X...

About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004

About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 This document describes the security content of OS X El Capitan v10.11.6 and Security Update 2016-004. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm securi...

Linux kernel 'compat_setsockopt()' function arbitrary code execution vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the IPTSOSETREPLACE parameter in the 'compatsetsockopt' function of the Linux kernel. A local attacker could exploit this vulnerability to...

OSX < 10.11.5 Multiple Vulnerabilities

Binary data 800143.prm...

Apple OS X El Capitan NVIDIA Graphics Drivers Stack Buffer Overflow Vulnerability

Apple OS X El Capitan is a dedicated operating system developed by Apple for Mac computers.NVIDIA Graphics Drivers is one of the graphics driver components. A stack buffer overflow vulnerability exists in NVIDIA Graphics Drivers in Apple OS X El Capitan versions prior to 10.11.5. This vulnerabili...

Android Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi is a Broadcom-developed Wi-Fi module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver for Android. A local attacker can exploit...

Android Qualcomm Video Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video Driver is a video driver developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Video Driver for Android. A local attacker could exploit...

Android Qualcomm Video Driver Local Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video Driver is a video driver developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Video Driver for Android. A local attacker could exploit...

Android Qualcomm GPU Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm GPU Driver is a graphics processor driver developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm GPU Driver for Android. A local attacker...