Monthly Archives: December 2016
Asterisk Project Security Advisory – AST-2016-009
Asterisk Project Security Advisory – The chan_sip channel driver has a liberal definition for whitespace when attempting to strip the content between a SIP header name and a colon character. Rather than following RFC 3261 and stripping only spaces and horizontal tabs, Asterisk treats any non-printable ASCII character as if it were whitespace.
AST-2016-008: Crash on SDP offer or answer from endpoint using Opus
Posted by Asterisk Security Team on Dec 08
Asterisk Project Security Advisory – AST-2016-008
Product Asterisk
Summary Crash on SDP offer or answer from endpoint using
Opus
Nature of Advisory Remote Crash
Susceptibility Remote unauthenticated sessions…
AST-2016-009: <br>
Posted by Asterisk Security Team on Dec 08
Asterisk Project Security Advisory – ASTERISK-2016-009
Product Asterisk
Summary
Nature of Advisory Authentication Bypass
Susceptibility Remote unauthenticated sessions
Severity Minor
Exploits Known No…
Microsoft Remote Desktop Client For Mac 8.0.36 Remote Code Execution
Microsoft Remote Desktop Client for Mac version 8.0.36 suffers from a remote code execution vulnerability.
CVE-2015-8966
arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3) F_OFD_SETLKW command in an fcntl64 system call.
CVE-2015-8967
arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the “strict page permissions” protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access.
CVE-2016-9120
Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs at the same time.
Microsoft Internet Explorer 9 MSHTML CDispNode::InsertSiblingNode Use-After-Free
Microsoft Internet Explorer version 9 suffers from an MSHTML CDispNode::InsertSiblingNode use-after-free vulnerability.
CVE-2016-9920
steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute arbitrary code via a modified HTTP request that sends a crafted e-mail message.