262 matches found
PT-2018-13544
Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1 Description The issue is related to several buffer overflows that occur when handling responses from a Gemsafe V1 Smartcard in the gemsafe get cert len function in libopensc/pkcs15-gemsafeV1.c. This could be...
Xen xen-netback xenvif_set_hash_mapping Integer Overflow Exploit
Exploit for multiple platform in category dos / poc Xen: integer overflow in xen-netback xenvifsethashmapping The xen-netback linux kernel module is the default backend for Xen's virtual network devices. Since commit 40d8abdee806d496a60ee607a6d01b1cd7fabaf0 the backend supports an additional...
NVIDIA Graphics Driver Multiple Vulnerabilities (including fixes for Intel Speculative Side Channel Vulnerabilities) - US
Lenovo Security Advisory: LEN-16730 Potential Impact: Denial of service, possible escalation of privilege, exfiltration of privileged memory Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5753, CVE-2017-6266, CVE-2017-6267, CVE-2017-6268, CVE-2017-6269, CVE-2017-6270,...
Integrated Management Module 2 (IMM2) First Failure Data Capture (FFDC) Information Disclosure - US
Lenovo Security Advisory: LEN-20227 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9068 Summary Description: The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware...
PT-2018-17174
Name of the Vulnerable Software and Affected Versions: Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 Description: A buffer overflow may occur in the wlan hdd cfg80211 add key function when copying keyRSC if...
Broadcom WiFi Buffer Overflow Vulnerability - Lenovo Support US
No description provided...
CVE-2017-15855: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application...
Unbreakable Enterprise kernel security update
2.6.39-400.298.6 - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947612 CVE-2018-100199 2.6.39-400.298.5 - xen-netfront: fix rx stall when reqprodpvt goes back to more than zero again Dongli Zhang Orabug: 25053376 - x86/IBRS: Remove support for IBRSENABLEDUSER...
CCN-lite buffer overflow vulnerability (CNVD-2018-03681)
CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A buffer overflow vulnerability exists in ccn-lite-ccnb2xml.c in versions of CCN-lite prior to 2.0.0. An attacker can exploit this vulnerability to cause a buffer overflow via a route...
Buffer overflow
Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...
CVE-2017-12468
Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...
CVE-2017-12468
Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...
PT-2018-5407
Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists, allowing context-dependent attackers to have an unspecified impact. This issue involves vectors related to the vallen and len variables. Recommendations: For version...
CVE-2017-12468: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...
CVE-2017-11029: Improper Restriction of Operations within the Bounds of a Memory Buffer
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application provided buffer, which resides in user space. An unchecked...
PT-2017-11693
Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue arises in the camera application due to the Camera...
Unbreakable Enterprise kernel security update
4.1.12-103.9.2 - Revert 'drivers/char/mem.c: deny access in open operation when securelevel is set' Brian Maly Orabug: 27037811 4.1.12-103.9.1 - xfs: use dedicated log worker wq to avoid deadlock with cil wq Brian Foster Orabug: 27013241 - scsi: scsitransportiscsi: fix the issue that iscsiifrx...
CVE-2017-14054
In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivrreadheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would...
Linux xfrm_replay_verify_len Buffer Overflow Privilege Escalation
The vulnerability of the xfrmreplayverifylen function in the Linux operating system arises due to the lack of verification of the XFRMMSGNEWAE size after updates. Exploiting this vulnerability can allow a local attacker to gain superuser privileges or cause service failures...
UBUNTU-CVE-2017-7184
The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRMMSGNEWAE update, which allows local users to obtain root privileges or cause a denial of service heap-based out-of-bounds access by leveraging the CAPNETADMI...