228 matches found
CVE-2014-10052
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, S...
CVE-2014-10052
The CVE-2014-10052 issue affects Android on Qualcomm TZ subsystem usage (TZ apps and PIL image subsystem) where reserved memory is not cleared after use. Affected platforms include Android builds before 2018-04-05 patch level across numerous Snapdragon Mobile, Wear, and related SoCs (e.g., FSM905...
Fedora 26 : coreutils (2017-b17d54561b)
tail: revert to polling if a followed directory is replaced 1283760 ---- - date, touch: fix out-of-bounds write via large TZ variable CVE-2017-7476 ---- - do not obsolete coreutils-single, so it can be installed by DNF2 1444802 Note that Tenable Network Security has extracted the preceding...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...
Race condition
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
CVE-2015-9031
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...
CVE-2015-9031
CVE-2015-9031 arises in all Android CAF builds that use the Linux kernel, where a TZ memory address is exposed to the high-level OS (HLOS) by the HDCP component. The root cause is a leakage of a TZ memory address, enabling information disclosure within the system. The available documents do not s...
CVE-2015-9022
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
Heap overflow
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2017-7476
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2017-7476
Gnulib before 2017-04-26 contains a heap-based buffer overflow in the save_abbr function in time_rz.c triggered by the TZ environment variable. This vulnerability can lead to arbitrary code execution or crash conditions, as described in multiple sources (e.g., CNVD-2017-06995; NVD CVE-2017-7476)....
CVE-2017-7476
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2014-9680
sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access but not view file contents by running a program within an sudo session, as demonstrated by interfering with terminal output,...
SonicWall/Dell SonicWALL TZ Detection (SNMP)
SNMP based detection of SonicWall formerly Dell SonicWALL TZ devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dell SonicWALL TZ 100 < 5.9.1.0-22o DoS Vulnerability
Dell SonicWALL TZ 100 is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
openSUSE Security Update : sudo (openSUSE-2016-1402)
This update for sudo fixes the following security issues : - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality : - noexec bypass via system and popen CVE-2016-7032, bsc1007766 - noexec bypass via wordexp CVE-2016-7076, bsc1007501 - Fix unsafe handling of TZ...
DLA-726-1 libdatetime-timezone-perl - new upstream version
Bulletin has no description...
SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2016:2904-1)
This update for sudo fixes the following security issues : - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality : - noexec bypass via system and popen CVE-2016-7032, bsc1007766 - noexec bypass via wordexp CVE-2016-7076, bsc1007501 - Fix unsafe handling of TZ...
Dell SonicWall TotalSecure TZ 100 Denial of Service Vulnerability
The Dell SonicWall TotalSecure TZ 100 is a Unified Threat Management UTM firewall from Dell that provides intrusion prevention, anti-malware, content/URL screening and application control. A security vulnerability exists in Dell SonicWall TotalSecure TZ 100 appliances using version 5.9.1.0 and...