CVE-2022-41627

The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram EKG has no encryption for its data-over-sound protocols. Exploiting this vulnerability could allow an attacker to read patient EKG results or create a denial-of-service condition by emitting soun...

Design/Logic Flaw

The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram EKG has no encryption for its data-over-sound protocols. Exploiting this vulnerability could allow an attacker to read patient EKG results or create a denial-of-service condition by emitting soun...

CVE-2022-41627

The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram EKG has no encryption for its data-over-sound protocols. Exploiting this vulnerability could allow an attacker to read patient EKG results or create a denial-of-service condition by emitting soun...

CVE-2022-41627

The CVE-2022-41627 issue affects AliveCor’s KardiaMobile IoT device: the data-over-sound channel has no encryption, enabling an attacker in close proximity (less than 5 feet) to read ECG results or trigger a DoS by emitting matching audio frequencies. The vulnerability is tied to the IoT device’s...

SUSE-SU-2022:3802-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2018-20846: Fixed OOB read in pinextlrcp, pinextrlcp, pinextrpcl, pinextpcrl, pinextrpcl, and pinextcprl in openmj2/pi.c bsc1140205. - CVE-2018-21010: Fixed heap buffer overflow in colorapplyiccprofile in bin/common/color.c bsc1149789. -...

SUSE-SU-2022:3801-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2018-21010: Fixed heap buffer overflow in colorapplyiccprofile in bin/common/color.c bsc1149789. - CVE-2020-27824: Fixed OOB read in opjdwtcalcexplicitstepsizes bsc1179821. - CVE-2020-27842: Fixed null pointer dereference in opjtgtreset...

PT-2022-25992 · Alivecor · Kardiamobile

Name of the Vulnerable Software and Affected Versions: KardiaMobile affected versions not specified Description: The physical IoT device of the AliveCor's KardiaMobile has no encryption for its data-over-sound protocols. This issue could allow an attacker to read patient EKG results or create a...

EulerOS 2.0 SP3 : ruby (EulerOS-SA-2022-2634)

According to the versions of the ruby package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float...

Oracle Linux 8 : zlib (ELSA-2022-7106)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7106 advisory. 1.2.11.19 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 Tenable has extracted the preceding descriptio...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

Heap overflow

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

AliveCor KardiaMobile

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Public exploits are available, low attack complexity Vendor: AliveCor Equipment: KardiaMobile Vulnerabilities: Authentication Bypass by Assumed-immutable Data, Missing Encryption of Sensitive Data 2. RISK EVALUATION Successful exploitation of these...

Ubuntu 16.04 ESM : Open vSwitch vulnerability (USN-5698-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5698-2 advisory. USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description bloc...

Ubuntu 18.04 LTS : Open vSwitch vulnerability (USN-5698-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5698-1 advisory. It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this issue to cause Open vSwitch to crash,...

RHEL 8 : zlib (RHSA-2022:7106)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7106 advisory. The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fixes: zlib: a...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

CVE-2022-39836

CVE-2022-39836 affects the Connected Vehicle Systems Alliance (COVESA) dlt-daemon up to version 2.18.8. The root cause is a faulty DLT file parser with insufficient validation, leading to a heap-based buffer over-read of one byte when processing a crafted DLT file. Descriptions across connected s...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

Mageia: Security Advisory (MGASA-2022-0387)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...