Safety CI > MobSF/Mobile-Security-Framework-MobSF

pyup-scheduled-update-2023-04-10

3 years, 4 months ago

cfa34574

Update frida from 15.2.2 to 16.0.11

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

3 years, 4 months ago

d9f5881e

version bump

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

3 years, 4 months ago

3800addd

Code QA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

3 years, 4 months ago

e9ab9b1a

Code QA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

3 years, 4 months ago

419fe7b8

Summary for Android and iOS SCA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

3 years, 4 months ago

a13bf58c

HOTFIX: Android min SDK check on janus vulnerability detection (#2159) * Android min SDK check on

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pipfile

3 years, 4 months ago

1bc37873

Update README.md

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pipfile

3 years, 4 months ago

44c67949

Android min SDK check on janus check

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pyup-scheduled-update-2023-04-03

3 years, 4 months ago

e1acd3d4

Update quark-engine from 22.10.1 to 23.3.1

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pyup-scheduled-update-2023-04-03

3 years, 4 months ago

ad6b69b8

Update frida from 15.2.2 to 16.0.11

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

3 years, 4 months ago

93432c96

Merge branch 'master' of github.com:MobSF/Mobile-Security-Framework-MobSF

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

3 years, 4 months ago

be23758b

[HOTFIX] Add support for environment variable for MobSF config (#2150) * add support for environmen

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

3 years, 4 months ago

f1409c50

update lief

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

3 years, 4 months ago

5c361310

Fixes #2109

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

3 years, 4 months ago

c117ec4a

add support for environment variable config

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c