Open Source SIP Sniffer: pcapsipdump

Open Source SIP Sniffer pcapsipdump is libpcap-based SIP sniffer with per-call sorting capabilities. It writes SIP/RTP sessions to disk in a same format, as “tcpdump -w”, but one file per SIP session even if there is thousands of concurrent SIP sessions. Each session goes in a separate, fancy-nam...

Mp3splt Denial of Service Vulnerability

Mp3splt is a set of mp3 music cutting command line program. A security vulnerability exists in the 'freeoptions' function in the optionsmanager.c file in Mp3splt version 2.6.2. A remote attacker can exploit this vulnerability to cause a denial of service invalid release and crash with the help of...

UBUNTU-CVE-2017-5666

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...

CVE-2017-5666

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...

CVE-2017-5851

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...

Design/Logic Flaw

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...

DEBIAN-CVE-2017-5851

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...

UBUNTU-CVE-2017-5851

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...

CVE-2017-5666

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...

CVE-2017-5851

The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...

OverThruster - HID Attack Payload Generator For Arduinos

OverThruster is a tool to generate sketches for Arduinos when used as an HID Attack. It was designed around devices with the ATMEGA32U4 chip, like the CJMCU-BEETLE, or the new LilyGo "BadUSB" devices popping up on ebay and aliexpress that look like USB sticks but contain an Arduino. I wrote this...

SUSE-SU-2017:0554-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

CVE-2017-5970

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...

Code injection

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...

CVE-2017-5970

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...

CVE-2017-5970

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...

CVE-2017-5970

Summary (CVE-2017-5970): The Linux kernel (ipv4_pktinfo_prepare in net/ipv4/ip_sockglue.c) up to version 4.9.9 is affected. A flaw can cause a denial of service (system crash) when triggered by (1) crafted system calls from an application or (2) IPv4 traffic carrying invalid IP options. The root ...

ntfs-3g - Unsanitized modprobe Environment Privilege Escalation

ntfs-3g - Unsanitized modprobe Environment Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1072 ntfs-3g is installed by default e.g. on Ubuntu and comes with a setuid root program /bin/ntfs-3g. When this program is invoked on a system whose kernel does not...

CVE-2017-5970

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...

UBUNTU-CVE-2017-5970

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...