CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18283: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

PT-2018-6800

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile versions QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660 Description: The issue is related to possible memory corruption when a Read Val Blob Req is received with invalid parameters. Recommendations: Fo...

PT-2018-10191

Name of the Vulnerable Software and Affected Versions glusterfs affected versions not specified Description A flaw was found in the RPC request using gfs3 rename req in the glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume...

PT-2018-10189

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in the RPC request using gfs3 symlink req in the glusterfs server, allowing symlink destinations to point to file paths outside of the gluster volume. An authenticat...

PT-2018-10190

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in the RPC request using gfs2 create req in the glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute arbitrary code ...

PT-2018-10187

Name of the Vulnerable Software and Affected Versions glusterfs server affected versions not specified Description A flaw was found in RPC request using gfs3 mknod req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path...

PT-2018-10188

Name of the Vulnerable Software and Affected Versions glusterfs affected versions not specified Description A flaw was found in the RPC request using gfs3 lookup req in the glusterfs server. This issue allows an authenticated attacker to leak information and execute a remote denial of service by...

PT-2018-1622

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to a possible out of bounds read in the mca ccb hdl req function of mca cact.cc. This could lead to remote information disclosure over Bluetooth with no additional execution...

Threat Outbreak Alert RuleID32941: Email Messages Distributing Malicious Software on June 11, 2018

Medium Alert ID: 58139 First Published: 2018 June 11 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32941 may contain the following files: Name | Siz...

PT-2018-5569

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to an out of bounds read in the sdp server handle client req function due to a missing bounds check. This could lead to local information disclosure without requiring addition...

PT-2018-5542

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to an out of bounds write in the process service search attr req function due to a missing bounds check. This could potentially lead to remote...

CVE-2017-9710

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

CVE-2017-9710

CVE-2017-9710 is described as a buffer overflow in the IOCTL path used to send QMI NOTIFY REQ messages in Android for MSM, Firefox OS for MSM, and CAF Android builds using the Linux kernel. The root cause is that the IOCTL interface can be invoked from multiple contexts, enabling a buffer overflo...

CVE-2017-9710: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

Buffer overflow

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, possible buffer overflow or information leak in the functions "smesetfties" and "csrroamissueftpreauthreq" due to incorrect initialization of WEXT callbacks and lack of the checks for...

DEBIAN-CVE-2017-9766

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

PT-2016-7318

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and QEMU process crash. This is due to the failure to limit the...