PT-2018-2821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's implementation of the if usb probe handler in the libertas tf usb.ko module. An attacker can exploit this by connecting a...

PT-2018-2852

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the hwarc probe handler of the Astra Linux kernel, specifically in the drivers/uwb/hwa-rc.ko module. The error occurs when memory is...

PT-2018-2844

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the implementation of the snd card cs46xx probe handler of the sound/pci/cs46xx/snd-cs46xx.ko module. This can be exploited to cause...

PT-2018-2819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's implementation of the fotg210 udc probe handler for the fotg210-udc.ko loadable module. An attacker could exploit this issue b...

CVE-2018-11823

CVE-2018-11823 affects CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) based on the Linux kernel. The vulnerability is a double-free in the power module triggered by freeing device memory during driver probe failure. Root cause described as improper memory handling in the ...

CVE-2018-11918

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

Double free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, freeing device memory in driver probe failure will result in double free issue in power module...

Code injection

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

PT-2018-10910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns memory allocation in the Linux kernel, used by Android releases, where memory is automatically released by the kernel if the probe function fails with an error code...

CVE-2018-11918: Double Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

PT-2018-2806

Name of the Vulnerable Software and Affected Versions MasterSCADA affected versions not specified Description The issue is related to the use of an insecure memory allocation function alloca probe 16 in the dfact.dll COM object, specifically in the SetImage method of the BmpImager, GifImager,...

Oracle Linux 7 : gnutls (ELSA-2018-3050)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3050 advisory. - Improved counter-measures in TLS CBC record padding for lucky13 attack CVE-2018-10844, 1589704, CVE-2018-10845, 1589707 - Added counter-measures for...

Updated gnutls packages fix security vulnerabilities

The updated packages fix security vulnerabilities: It was found that the GnuTLS implementation of HMAC-SHA-256 and HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical...

F5 Networks BIG-IP : TMM vulnerability (K81137982)

Undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause a disruption of service to the Traffic Management Microkernel TMM. CVE-2017-6136 Impact An attacker may be able to disrupt traffic or...

Side-Channel Attack

libgnutls.so is vulnerable to plain text recovery via cache-based side channel. An attacker is able to use a combination of Just in Time Prime+probe and Lucky-13 attacks to recover plain text using crafted packets in a cross-VM setting...

RHEL 7 : gnutls (RHSA-2018:3050)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3050 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as...

gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery

A cache-based side channel attack was found in the way GnuTLS implements CBC-mode cipher suites. An attacker could use a combination of "Just in Time" Prime+probe and Lucky-13 attacks to recover plain text in a cross-VM attack scenario...

Moderate: Red Hat Security Advisory: gnutls security, bug fix, and enhancement update

An update for gnutls is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

SUSE SLES12 Security Update : gnutls (SUSE-SU-2018:2825-2)

This update for gnutls fixes the following issues : This update for gnutls fixes the following issues : Security issues fixed : Improved mitigations against Lucky 13 class of attacks 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery CVE-2018-10846,...

Russian Trolls Are Still Playing Both Sides—Even With the Mueller Probe

The latest indictment against Russian trolls shows how they sowed division in the US on wedge issues, including the investigation into their activity...