CVE-2016-1722 – Apple Security Advisory 2016-03-21-2
https://notcve.org/view.php?id=CVE-2016-1722
20 Jan 2016 — syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. syslog en Apple iOS en versiones anteriores a 9.2.1, OS X en versiones anteriores a 10.11.3 y tvOS en versiones anteriores a 9.1.1 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. OS X El Capitan 10.11.3 and Security Update 20... • http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1729 – Apple Security Advisory 2016-01-19-2
https://notcve.org/view.php?id=CVE-2016-1729
20 Jan 2016 — Untrusted search path vulnerability in OSA Scripts in Apple OS X before 10.11.3 allows attackers to load arbitrary script libraries via a quarantined application. Vulnerabilidad en la búsqueda de ruta no confiable en OSA Scripts en Apple OS X en versiones anteriores a 10.11.3 permite a atacantes cargar librerías de secuencias de comandos arbitrarias a través de una aplicación en cuarentena. OS X El Capitan 10.11.3 and Security Update 2016-001 are now available and address memory corruption, code execution, ... • http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html •
CVE-2016-1716 – Apple Security Advisory 2016-01-19-2
https://notcve.org/view.php?id=CVE-2016-1716
20 Jan 2016 — AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. AppleGraphicsPowerManagement en Apple OS X en versiones anteriores a 10.11.3 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. OS X El Capitan 10.11.3 and Security Update 2016-001 are now available and address memory corruption, code execution, a... • http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1717 – Apple Security Advisory 2016-03-21-2
https://notcve.org/view.php?id=CVE-2016-1717
20 Jan 2016 — The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. El componente Disk Images en Apple iOS en versiones anteriores a 9.2.1, OS X en versiones anteriores a 10.11.3 y tvOS en versiones anteriores a 9.1.1 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. OS X El ... • http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1718 – Apple OS X IOAcceleratorFamily2 Out-Of-Bounds Indexing Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2016-1718
20 Jan 2016 — The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. La interfaz IOAcceleratorFamily2 en IOAcceleratorFamily en Apple OS X en versiones anteriores a 10.11.3 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. This vulnerability allows local attackers to elevate privileges... • http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1719 – iOS Kernel - AppleOscarAccelerometer Use-After-Free
https://notcve.org/view.php?id=CVE-2016-1719
20 Jan 2016 — The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. La API IOHIDFamily en Apple iOS en versiones anteriores a 9.2.1, OS X en versiones anteriores a 10.11.3 y tvOS en versiones anteriores a 9.1.1 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. OS X El Capitan 10.11... • https://packetstorm.news/files/id/135438 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1720 – Apple Mac OSX - io_service_close Use-After-Free
https://notcve.org/view.php?id=CVE-2016-1720
20 Jan 2016 — IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. IOKit en Apple iOS en versiones anteriores a 9.2.1, OS X en versiones anteriores a 10.11.3 y tvOS en versiones anteriores a 9.1.1 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. It turns out that the spoofed no-more-senders no... • https://packetstorm.news/files/id/135435 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-1721 – Apple Mac OSX / iOS - Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities
https://notcve.org/view.php?id=CVE-2016-1721
20 Jan 2016 — The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. El kernel en Apple iOS en versiones anteriores a 9.2.1, OS X en versiones anteriores a 10.11.3 y tvOS en versiones anteriores a 9.1.1 permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. OS X El Capitan 10.11.3 and Security Up... • https://packetstorm.news/files/id/135444 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2016-0777 – OpenSSH: Client Information leak due to use of roaming connection feature
https://notcve.org/view.php?id=CVE-2016-0777
14 Jan 2016 — The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key. La función resend_bytes en roaming_common.c en el cliente en OpenSSH 5.x, 6.x y 7.x en versiones anteriores a 7.1p2 permite a servidores remotos obtener información sensible desde la memoria de proceso mediante la petición de transmisión de un bu... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-682: Incorrect Calculation •
CVE-2016-0778 – OpenSSH: Client buffer-overflow when using roaming connections
https://notcve.org/view.php?id=CVE-2016-0778
14 Jan 2016 — The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings. Las funciones (1) roaming_read y (2) roaming_write en roaming_common.c en el cliente en OpenSSH 5.x, 6.x y 7.x en ve... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •