Fedora 24 : ecryptfs-utils (2016-41301e2187)

ecryptfs-utils updated to 111 - fix ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive CVE-2016-6224, rhbz1356828 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

USN-3032-1 ecryptfs-utils vulnerability

It was discovered that eCryptfs incorrectly configured the encrypted swap partition for certain drive types. An attacker could use this issue to discover sensitive information...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the GNTTABOPswapgrantref function in Xen administrators’ scripts is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure by creating instances of the GNTTABOPsetuptable or GNTTABOPsetversion...

Internet Bug Bounty: ASN.1 BIO excessive memory allocation (CVE-2016-2109)

On 4 April 2016 I reported a bug to the OpenSSL Security Team where I was able to force OpenSSL to use large amounts of cpu time, memory and swap space. They confirmed receipt on 6 April 2016 and on 22 April 2016 I was notified that they were assigning CVE-2016-2109 to this flaw and the fix was...

Crazy Cake Swap - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Cake Swap published at the 'play' market has multiple vulnerabilities...

Swap Riddle - Get rid of Red - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Swap Riddle - Get rid of Red published at the 'play' market has multiple vulnerabilities...

FarmVille: Harvest Swap - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FarmVille: Harvest Swap published at the 'play' market has multiple vulnerabilities...

Real Time Face Swap - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Time Face Swap published at the 'play' market has multiple vulnerabilities...

Face Swap - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Face Swap published at the 'play' market has multiple vulnerabilities...

US releases Iranian Hacker as part of Prisoner Exchange Program

The United States has freed 4 Iranian nationals including one Hacker and reduced the sentences of 3 others in exchange for the release of 5 Americans formerly held by Iran as part of a prisoner swap or Prisoner Exchange Program. The Iranian citizens released from the United States custody through...

SUSE-SU-2015:2053-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2053-2 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2054-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security and non security issues: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

UBUNTU-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

The vulnerability of the iOS operating system, which allows a hacker to gain access to the swap space

The vulnerability of CoreAnimation in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the swap buffer through a specially crafted application that runs in the background...

Xen GNTTABOP_swap_grant_ref() Version Check Denial of Service Vulnerability

Xen is a virtualization technology for the Linux kernel that allows multiple operating systems to run simultaneously. A security vulnerability in Xen GNTTABOPswapgrantref allows local users to exploit the vulnerability by triggering a null pointer reference that crashes the target HOST, due to a...

kernel security update

kernel 2.6.18-400.1.1.0.1 - net fix tcptrimhead James Li orabug 14512145, 19219078 - ocfs2: dlm: fix recovery hung Junxiao Bi orabug 13956772 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function...

DEBIAN-CVE-2014-8097

The DBE extension in X.Org X Window System aka X11 or X X11R6.1 and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index value to the 1...