F5 Networks BIG-IP : BIG-IP APM client for Linux and macOS vulnerability (K54431371)

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to getownership of files owned by root on the local client host.CVE-2018-5546 Impact A malicious, local, unprivileged user...

Design/Logic Flaw

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of...

Out-of-bounds

VMware Horizon 6 6.x.x before 6.2.7, Horizon 7 7.x.x before 7.5.1, and Horizon Client 4.x.x and prior before 4.8.1 contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privilege...

CVE-2018-5529

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

CVE-2018-5529

The CVE-2018-5529 entry concerns the svpn component of the F5 BIG-IP APM client for Linux and macOS, vulnerable prior to version 7.1.7. The issue arises because svpn runs as a privileged process, enabling a local unprivileged user to gain super-user privileges on the local client host, potentiall...

Buffer overflow

Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x8020601C. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a...

The vulnerability of the avrc_pars_vendor_cmd function in the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the avrcparsvendorcmd function avrcparstg.cc in the Android operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the wma_roam_scan_filter function in the Android operating system’s WLAN component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaroamscanfilter function in the Android WLAN operating system from the CAF repository is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a specially...

The vulnerability of the `wma_unified_bcntx_status_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...

The vulnerability of the Display component in the Android operating system from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the Display component in the Android operating system from the CAF repository is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the context of a privileged process...

The vulnerability of the wma_nlo_match_evt_handler function in the Android WLAN operating system from the CAF repository allows a attacker to execute arbitrary code.

The vulnerability of the wmanlomatchevthandler function in the Android WLAN operating system from the CAF repository is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

The vulnerability of the wma_p2p_noa_event_handler function in the Android WLAN operating system from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmap2pnoaeventhandler function in the Android operating system, originating from the CAF repository, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

CVE-2018-9139

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

CVE-2018-9143

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

CVE-2018-9139

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

Heap overflow

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

Buffer overflow

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

CVE-2018-9139

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

CVE-2018-9143

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06664)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...