81 matches found
EUVD-2018-8949
Malware in sbrugna...
linuxptp bug fix update
An update is available for linuxptp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linuxptp packages provide Precision Time Protocol PTP implementation for...
RHEL 6 : gypsy (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gypsy: multiple vulnerabilities CVE-2011-0523 - Multiple buffer overflows in the NMEA parser nmea-gen.c i...
SUSE CVE-2011-0524
Multiple buffer overflows in the NMEA parser nmea-gen.c in gypsy 0.8 allow local users to cause a denial of service crash via unspecified vectors related to the sprintf function...
SUSE CVE-2013-2038
The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service daemon termination and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was...
On-Board 'Mystery Boxes' Threaten Global Shipping Vessels
Commercial shipping environments are rife with vulnerabilities, according to researchers – up to and including unpatched “mystery boxes” that no one knows anything about. “In every single nautical pen test to date we have unearthed a system or device, that of the few crew that were aware, no one...
Unmasking mystery boxes on ship’s bridges
We pen test a variety of vessel and platform types across different fleets and operators. In every single test to date we have unearthed a system or device, that of the few crew that were aware, no-one could tell us what it is was for. In other scenarios an undocumented system or device would be...
[SECURITY] Fedora 28 Update: gpsd-3.17-6.fc28
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
[SECURITY] Fedora 29 Update: gpsd-3.17-6.fc29
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
Sinking a ship and hiding the evidence
Our earlier work on Voyage Data Recorder manipulation got us thinking about how a malicious individual or organisation might bring about the demise of a ship and hide the evidence. There are plenty of ways to get malware on to a ship. Whether it’s via satcoms, phishing, USB, crew Wi-Fi, dodgy DVD...
xtimor NMEA library buffer overflow vulnerability
The xtimor NMEA library aka nmealib is an open source library for using the NMEA protocol. A stack buffer overflow vulnerability exists in the 'nmeaparse' function in the parser.c file in version 0.5.3 of the xtimor NMEA library, which can be exploited by an attacker to cause a denial of service...
CVE-2018-17174
A stack-based buffer overflow was discovered in the xtimor NMEA library aka nmealib 0.5.3. nmeaparse in parser.c allows an attacker to trigger denial of service even arbitrary code execution in a certain context in a product using this library via malformed data...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write. A stack-based buffer overflow was discovered in the xtimor NMEA library aka nmealib 0.5.3. nmeaparse in parser.c allows an attacker to trigger denial of service even arbitrary code execution in a certain context in ...
Stack overflow
A stack-based buffer overflow was discovered in the xtimor NMEA library aka nmealib 0.5.3. nmeaparse in parser.c allows an attacker to trigger denial of service even arbitrary code execution in a certain context in a product using this library via malformed data...
CVE-2018-17174
The CVE-2018-17174 affects the xtimor NMEA library (aka nmealib) up to version 0.5.3. The vulnerability is a stack-based buffer overflow in nmea_parse() (parser.c), allowing malformed data to trigger denial of service and, in certain contexts, potentially arbitrary code execution within a product...
CVE-2018-17174
A stack-based buffer overflow was discovered in the xtimor NMEA library aka nmealib 0.5.3. nmeaparse in parser.c allows an attacker to trigger denial of service even arbitrary code execution in a certain context in a product using this library via malformed data...
Hacking Navtex maritime warning messages
When data roaming was still expensive across Europe and cellular data service was patchy, I used Navtex extensively whilst sailing in the Mediterranean. Every four hours, one could get a useful marine weather forecast. Was there a fun days sailing ahead, or was a dash for port and gin & tonic in ...
DEBIAN-CVE-2013-2038
The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service daemon termination and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was...
Fedora Update for gpsd FEDORA-2013-7309
Check for the Version of gpsd OpenVAS Vulnerability Test Fedora Update for gpsd FEDORA-2013-7309 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 18 Update: gpsd-3.9-1.fc18
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...