SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:3195-1)

This update for ntp fixes the following issues: ntp was updated to 4.2.8p9. Security issues fixed : - CVE-2016-9311, CVE-2016-9310, bsc1011377: Mode 6 unauthenticated trap information disclosure and DDoS vector. - CVE-2016-7427, bsc1011390: Broadcast Mode Replay Prevention DoS. - CVE-2016-7428,...

CentOS 5 : kernel (CESA-2016:2962)

An update for kernel is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Huawei cellular Wi-Fi driver suffers from input checksum vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...

Huawei H60 cell phone touthscreen driver suffers from stack overflow vulnerability

The Huawei H60 Honor 6 is a smartphone from the Chinese company Huawei. A stack overflow vulnerability exists in the touthscreen driver of the Huawei H60 phone. After an attacker induces a user to install a malicious application, the application can exploit the vulnerability to send specific...

Buffer Overflow Vulnerability in Huawei P9 Mobile Wi-Fi Driver

Huawei P9 is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability in the Huawei P9 phone's Wi-Fi driver due to a lack of parameter checking can be exploited by an attacker to trick a user into installing a malicious application, which in turn can be exploited by th...

CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

Google Android Telephony Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, with Telephony as one of the components providing telephony functionality. A denial of service vulnerability exists in Telephony in Android. The vulnerability can be exploited by an...

D-Link DI-524 - Cross-Site Request Forgery

D-Link DI-524 - Cross-Site Request Forgery Title: D-Link DI-524 - Cross-Site-Request-Forgery Vulnerability Credit: Felipe Soares de Souza Date: 09/12/2016 Vendor: D-Link Product: D-Link DI-524 Wireless 150 Product link: https://dlink.com.br/produto/di-524150 Version: Firmware 9.01 1- Reboot the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-12180)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause a device to hang or...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-12181)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause ...

Denial of Service Vulnerability in Moxa NPort5110 TCP/IP Stack

Moxa NPort5110 is an industrial-grade serial server manufactured by Moxa Taiwan for serial device networking. A denial of service vulnerability exists in the Moxa NPort5110 TCP/IP stack. Sending 1-2 UDP length anomaly messages to the NPort5110's UDP port 161 SNMP can cause the NPort5110's TCP/IP...

Apache CouchDB 2.0.0 Local Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE-COUCHDB-LOCAL-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open...

Huawei Play 5C phone TP touchscreen driver suffers from buffer overflow vulnerability

Huawei Play 5C is a smartphone from Huawei. A buffer overflow vulnerability exists in the TP touchscreen driver of the Huawei Play 5C phone. Due to the lack of parameter checking in the TP touchscreen driver, an attacker who gains root privileges and exploits the vulnerability can construct...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

Buffer overflow vulnerability in HIFI driver for multiple Huawei phones

Huawei Mate 8, Mate S, P8, P9 are smartphones from Huawei. A buffer overflow vulnerability exists in the HIFI driver of multiple Huawei phones. Due to the lack of parameter checking in the HIFI driver of certain Huawei phones, an attacker could exploit the vulnerability to construct specific...

Wyse Zero Client Unable to Log On to StoreFront

Wyse Zero Clients are unable to log on to StoreFront. The following error is received: Start roaming account , Citrix Sign-On failed This issue occurs after rebooting one of the devices. The devices that are not yet rebooted are working without any issues...

Integer Overflow Vulnerability in Some Huawei Switches

Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. An integer overflow vulnerability exists in some of Huawei's switches. Due to the lack of checksums on specific fields in IPFPM messages, an unauthenticated remote attacke...

Denial of Service Vulnerability in TrustZone Driver for Some Huawei Phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. A denial of service vulnerability exists in the TrustZone driver of some Huawei phones. An attacker can trick users into installing a malicious application, and the application exploits the vulnerability to pass specific parameters to the...

CVE-2016-6747

A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-31244612. References: NVIDIA...