Privilege escalation

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053...

Privilege escalation

A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel...

Privilege escalation

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938...

Information disclosure

An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576...

UBUNTU-CVE-2017-13221

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938...

CVE-2017-13219

CVE-2017-13219 affects the Android kernel Synaptics touchscreen controller. Connected sources identify a denial-of-service flaw in the Upstream kernel’s Synaptics touchscreen component, exploitable on Android devices (e.g., Pixel/Nexus context). The vulnerability is a DoS with potential impact on...

CVE-2017-13219

A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865...

CVE-2017-13215

A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel...

CVE-2017-13221

CVE-2017-13221 is an Elevation of Privilege (EoP) vulnerability affecting the Upstream kernel WiFi driver in Android devices (Android kernel). The connected documents consistently describe a local vulnerability that could allow a non-privileged attacker to escalate privileges via the kernel WiFi ...

CVE-2017-13215

A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel...

CVE-2017-13220

CVE-2017-13220 is described in connected advisories as an elevation of privilege in the Upstream kernel bluez affecting the Android kernel (Android ID A-63527053). The Nessus/OpenVAS entries reference this CVE alongside other Linux kernel CVEs, confirming a kernel-related issue, but the provided ...

CVE-2017-13215

CVE-2017-13215 describes an elevation-of-privilege in the Upstream Linux kernel skcipher_recvmsg path. The vulnerability, tied to the skcipherRecvMsg function, enables local privilege escalation when exploited via the Android kernel (Android kernel reference). Exploitation status is not detailed ...

CVE-2017-13220

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053...

gdal/gdal_fuzzer: Heap-buffer-overflow in gdal_lh_table_lookup_entry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6180357855510528 Project: gdal Fuzzer: aflgdalfuzzer Fuzz target binary: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60600001a6c8 Crash...

gdal/ogr_filesystem_fuzzer: NULL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5745322799136768 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Null-dereference READ Crash...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in CopyMagickString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5554905256296448 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4705868739248128 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-13220

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053...

UBUNTU-CVE-2017-13220

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053...

Updated dokuwiki package fixes security vulnerability

DokuWiki through 2017-02-19b has XSS in the at parameter aka the DATEAT variable to doku.php and updated package is fixed by added patch from upstream...