PT-2018-6691

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue affects user privacy due to the original mac spoofing feature not utilizing randomized sequence numbers and randomized source address for cfg80211 scan, vendor...

CVE-2017-18072: Exposure of Sensitive Information to an Unauthorized Actor

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, S...

PT-2018-9659

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16 Description: The issue allows local users to cause a denial of service by triggering a failure of resource retrieval, resulting in a NULL pointer dereference. This is due to a problem in the hi3660 stub clk...

Libav 'mpc8_probe' function heap out-of-bounds read vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'mpc8probe' function of the libavformat/mpc8.c file in Libav version 12.2. A remote attacker can exploi...

CVE-2017-18245

The mpc8probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted audio file...

PT-2018-6771

Name of the Vulnerable Software and Affected Versions: Libav version 12.2 Description: The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, by providing a crafted audio file. This is related to the mpc8 probe function in libavformat/mpc8.c...

UBUNTU-CVE-2018-8043

The unimacmdioprobe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service NULL pointer dereference...

PT-2018-3991

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 3.4.2 Description The issue is related to the svg probe function in the libavformat/img2dec.c component of the FFmpeg library. It allows remote attackers to cause a denial of service due to an infinite loop via a crafte...

PT-2018-18402

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.15.9 Description: The issue is related to the unimac mdio probe function in the Linux kernel, which does not validate certain resource availability. This allows local users to cause a denial of service through...

January 31, 2018 – Morning Cyber Coffee Headlines – “Explorer 1” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 31, 2018 - Headlines Carbon Black in the News: Beyond 100 Days - BBC...

The vulnerability of the hdpvr_probe function (drivers/media/usb/hdpvr/hdpvr-core.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the hdpvrprobe function drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel is related to improper error handling. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects through a specially crafted USB device...

Linux kernel memory misreference vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'the usbtvprobe' function in the drivers/media/usb/usbtv/usbtv-core.c file in Linux kernel 4.14.10 and earlier. An attacker can...

PT-2017-15136

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.11 Description The issue is related to a use-after-free error in the usbtv probe function, which can cause a system crash or potentially have other unspecified impacts. This occurs when the audio registratio...

PiKarma - Detects Wireless Network Attacks

Detects wireless network attacks performed by KARMA module fake AP. Starts deauthentication attack for fake access points Working Principle for PiKarma Collects all the packets from Wireless Network. Probe Response Analyses all the packets in real time. If PiKarma finds more than one SSID info fr...

CVE-2017-6136

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...

PT-2017-16908

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 12.0.0 through 12.1.2 F5 BIG-IP software version 13.0.0 Description The issue affects F5 BIG-IP when undisclosed traffic patterns are sent to BIG-IP virtual servers with specific TCP profile settings enabled,...

CVE-2017-6136: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...

The vulnerability of the cx231xx_usb_probe function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the cx231xxusbprobe function in the Linux kernel’s drivers/media/usb/cx231xx/cx231xx-cards.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause system failures or other adverse effects through a specially crafted USB...

Information disclosure

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the...

CVE-2017-11022

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the...