Collaborate Disseminate
Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities,which may allow a remote,unauthenticated attacker to execute arbitrary commands on a vulnerable system. Continue reading VU#332928: Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities
CWE-325: Missing Required Cryptographic Step – CVE-2018-5383 Bluetooth utilizes a device pairing mechanism based on elliptic-curve Diffie-Hellman (ECDH) key exchange to allow encrypted communication between devices. The ECDH key pair consists of a priv… Continue reading VU#304725: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. (CVE-2018-5389) It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode how… Continue reading VU#857035: IKEv1 Main Mode vulnerable to brute force attacks
Intel processors are vulnerable to one or more L1 data cache information disclosure and terminal fault attacks via a speculative execution side channel. These attacks are known as L1 Terminal Fault:SGX,L1 Terminal Fault:OS/SMM,and L1 Terminal Fault:VMM. Continue reading VU#982149: Intel processors are vulnerable to a speculative execution side-channel attack called L1 Terminal Fault (L1TF)
Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Continue reading VU#857035: IKEv1 Main Mode vulnerable to brute force attacks
Android apps,including those pre-installed on some mobile devices,contain multiple vulnerabilities. All of these vulnerabilities were reported by Kryptowire. Vulnerabilities in pre-installed apps were presented at DEF CON 26 and a set of different vulnerabilities were previously coordinated by the Department of Homeland Security(DHS)Science and Technology Directorate(S&T)and National Cybersecurity and Communications Integration Center(NCCIC). Continue reading VU#787952: Android and iOS apps contain multiple vulnerabilities
The Linux kernel,versions 3.9+,IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets. Continue reading VU#641765: Linux kernel IP fragment re-assembly vulnerable to denial of service
The Linux kernel versions 4.9+and supported versions of FreeBSD are vulnerable to denial of service conditions with low rates of specially modified packets. Continue reading VU#962459: TCP implementations vulnerable to Denial of Service
mingw-w64 produces a executable Windows files without a relocations table by default,which breaks compatibility with ASLR. Continue reading VU#307144: mingw-w64 by default produces executables that opt in to ASLR, but are not compatible with ASLR
ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the “Dynamic base” PE header, which indicates ASLR compatibility, Windows executabl… Continue reading VU#307144: mingw-w64 by default produces executables that opt in to ASLR, but are not compatible with ASLR