CWE-354 Archives - CVE Vulnerability

CVE-2018-6336

Sun, 26 Feb 2023 06:50:40 +0000

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

The post CVE-2018-6336 appeared first on CVE Vulnerability.

CVE-2018-5382

Sun, 26 Feb 2023 06:50:19 +0000

The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47. For situations where people need to create the files for legacy reasons a specific keystore type “BKS-V1” was introduced in 1.49. It should be noted that the use of “BKS-V1” is discouraged by the library authors and should only be used where it is otherwise safe to do so, as in where the use of a 16 bit checksum for the file integrity check is not going to cause a security issue in itself.

The post CVE-2018-5382 appeared first on CVE Vulnerability.

CVE-2018-21070

Sun, 26 Feb 2023 06:48:51 +0000

An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).

The post CVE-2018-21070 appeared first on CVE Vulnerability.

CVE-2018-1000159

Sun, 26 Feb 2023 06:44:34 +0000

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_mac_and_pad(); line “end_pos = data_len – 1 – mac.digest_size” that can result in an attacker manipulating the TLS ciphertext which will not be detected by receiving tlslite-ng. This attack appears to be exploitable via man in the middle on a network connection. This vulnerability appears to have been fixed after commit 3674815d1b0f7484454995e2737a352e0a6a93d8.

The post CVE-2018-1000159 appeared first on CVE Vulnerability.

CVE-2020-9118

Sun, 26 Feb 2023 06:43:39 +0000

There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package’s integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-00 versions 9.0.3.1(H100SP13C00),9.0.3.1(H100SP18C00),9.0.3.1(H100SP3C00),9.0.3.1(H100SP9C00),9.0.3.2(H100SP1C00),9.0.3.2(H100SP2C00),9.0.3.2(H100SP5C00),9.0.3.2(H100SP8C00),9.0.3.3(H100SP1C00).

The post CVE-2020-9118 appeared first on CVE Vulnerability.

CVE-2020-8838

Sun, 26 Feb 2023 06:43:33 +0000

An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an arbitrary executable via a man-in-the-middle attack.

The post CVE-2020-8838 appeared first on CVE Vulnerability.

CVE-2020-7810

Sun, 26 Feb 2023 06:43:10 +0000

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacker could induce a user to crafted web page, causing damage such as malicious code infection.

The post CVE-2020-7810 appeared first on CVE Vulnerability.

CVE-2020-7807

Sun, 26 Feb 2023 06:43:10 +0000

A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in ____COMPONENT____ of LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: LG Electronics; LGPCSuite_Setup : 1.0.0.3 on Windows(x86, x64); IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup : 1.0.0.9 on Windows(x86, x64).

The post CVE-2020-7807 appeared first on CVE Vulnerability.

CVE-2020-6228

Sun, 26 Feb 2023 06:42:38 +0000

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer.

The post CVE-2020-6228 appeared first on CVE Vulnerability.

CVE-2020-5798

Sun, 26 Feb 2023 06:42:27 +0000

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions.

The post CVE-2020-5798 appeared first on CVE Vulnerability.