UBUNTU-CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

DEBIAN-CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

PYSEC-2018-62

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...

DEBIAN-CVE-2018-14522

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...

2016PilotOneClick

This is a collection of utilities and scripts to gain root access on a 2016 model Honda Pilot head unit and simplify the installation of third-party non-Honda apps. The scripts implement a dirtyCOW exploit to gain root access and use a bash script to automate the installation process. The scripts...

UBUNTU-CVE-2018-14015

The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file because of missing input validation in rbindwarfparsecompunit in libr/bin/dwarf.c...

Huawei Mate 9 Pro GPU Driver Arbitrary Memory Release Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. An arbitrary memory release security vulnerability exists in the GPU driver of the Huawei Mate 9 Pro phone due to insufficient validation of parameter legitimacy by the memory management module. An attacker can...

Kernel: FPU state information leakage via lazy FPU restore

A Floating Point Unit FPU state information leakage flaw was found in the way the Linux kernel saved and restored the FPU state during task switch. Linux kernels that follow the "Lazy FPU Restore" scheme are vulnerable to the FPU state information leakage issue. An unprivileged local attacker cou...

UBUNTU-CVE-2018-12891

An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions...

Unspecified vulnerability in Linux kernel (CNVD-2018-16689)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 4.17.2 and earlier, which stems from the page allocator not providing CPU resources to the oomlock mutex lock...

CVE-2018-12713

GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...

[SECURITY] Fedora 28 Update: nodejs-JSV-4.0.2-12.fc28

JSV is a JavaScript implementation of a extendable, fully compliant JSON Schema validator with the following features: The fastest extendable JSON validator available! Complete implementation of all current JSON Schema draft revisions. Supports creating individual environments sandboxes that...

Intel Core Microprocessors Information Disclosure Vulnerability

Intel Core-based microprocessors are the Core family of central processing unit products CPUs from the U.S. company Intel. An information disclosure vulnerability exists in Intel Core-based microprocessors. An attacker could exploit this vulnerability to obtain values about other processes stored...

FBI’s BEC Crackdown Leads To 74 Arrests Globally

The FBI announced Monday the results of a major crackdown on scammers behind business email compromise BEC campaigns that resulted in 74 arrests and the retrieval of millions of dollars. Several U.S. federal authorities and police from other countries were involved in Operation WireWire, a...

BMW Automotive Telematics Control Unit Design Vulnerability

BMW vehicles etc. are automotive products of the German company BMW Bayerische Motoren Werke AG.Telematics Control Unit Telematic Communication Box or TCB is one of the automatic transmission control units used. A security vulnerability exists in the Telematics Control Unit on BMW vehicles models...

BMW Automotive Telematics Control Unit Design Vulnerability (CNVD-2018-11274)

BMW vehicles etc. are automotive products of the German company BMW Bayerische Motoren Werke AG.Telematics Control Unit Telematic Communication Box or TCB is one of the automatic transmission control units used. A security vulnerability exists in the Telematics Control Unit in BMW vehicles vehicl...

Multiple BMW Head Unit HU_NBT Component Design Vulnerabilities

BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on several BMW vehicles vehicles...

Multiple BMW Vehicle Head Unit HU_NBT Component Design Vulnerabilities (CNVD-2018-11272)

BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on a number of BMW vehicles vehicles...

Multiple BMW Vehicle Head Unit HU_NBT Component Design Vulnerabilities (CNVD-2018-11271)

BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on several BMW vehicles vehicles...

Multiple BMW Vehicle Head Unit HU_NBT Component Design Vulnerabilities (CNVD-2018-11270)

BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on several BMW vehicles vehicles...