CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-6224

The CVE-2016-6224 issue affects the ecryptfs-utils package (ecryptfs-setup-swap) and stems from an incomplete fix for CVE-2015-8946. Affects systems using GPT with NVMe or MMC drives; boot may activate an unencrypted swap, leading to potential exposure of sensitive data. Multiple distributions (F...

CVE-2015-8946

Summary : CVE-2015-8946 affects the ecryptfs-utils package (eCryptfs) and its helper, specifically the swap setup in ecryptfs-setup-swap. The issue occurs when using GPT partitioning (and in some cases with certain systemd versions), where encrypted swap is not properly configured, potentially al...

Fedora 24 : ecryptfs-utils (2016-41301e2187)

ecryptfs-utils updated to 111 - fix ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive CVE-2016-6224, rhbz1356828 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

USN-3032-1 ecryptfs-utils vulnerability

It was discovered that eCryptfs incorrectly configured the encrypted swap partition for certain drive types. An attacker could use this issue to discover sensitive information...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the GNTTABOPswapgrantref function in Xen administrators’ scripts is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure by creating instances of the GNTTABOPsetuptable or GNTTABOPsetversion...

Internet Bug Bounty: ASN.1 BIO excessive memory allocation (CVE-2016-2109)

On 4 April 2016 I reported a bug to the OpenSSL Security Team where I was able to force OpenSSL to use large amounts of cpu time, memory and swap space. They confirmed receipt on 6 April 2016 and on 22 April 2016 I was notified that they were assigning CVE-2016-2109 to this flaw and the fix was...

Crazy Cake Swap - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Cake Swap published at the 'play' market has multiple vulnerabilities...

Swap Riddle - Get rid of Red - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Swap Riddle - Get rid of Red published at the 'play' market has multiple vulnerabilities...

FarmVille: Harvest Swap - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FarmVille: Harvest Swap published at the 'play' market has multiple vulnerabilities...

Real Time Face Swap - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Time Face Swap published at the 'play' market has multiple vulnerabilities...

Face Swap - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Face Swap published at the 'play' market has multiple vulnerabilities...

US releases Iranian Hacker as part of Prisoner Exchange Program

The United States has freed 4 Iranian nationals including one Hacker and reduced the sentences of 3 others in exchange for the release of 5 Americans formerly held by Iran as part of a prisoner swap or Prisoner Exchange Program. The Iranian citizens released from the United States custody through...

SUSE-SU-2015:2053-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2053-2 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2054-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security and non security issues: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

UBUNTU-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

The vulnerability of the iOS operating system, which allows a hacker to gain access to the swap space

The vulnerability of CoreAnimation in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the swap buffer through a specially crafted application that runs in the background...