CVE-2019-12155

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

BELL-CVE-2019-12155 CVE-2019-12155 does not affect BellSoft software

Bulletin has no description...

CVE-2019-12155

The CVE-2019-12155 entry concerns QEMU: the NULL pointer dereference in the qxl path (interface_release_resource in hw/display/qxl.c) affecting QEMU 3.1.x through 4.0.0. Connected sources confirm the issue is in the QXL spice-resource release path and are consistent with CVE-2019-12155 being repo...

Intel Integrated Performance Primitives (IPP) Information Disclosure - US

Lenovo Security Advisory: LEN-25662 Potential Impact: Information disclosure Severity: Moderate Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12155 Summary Description: Intel has notified Lenovo of a potential security vulnerability in Intel IPP may allow data leakage in cryptographic...

Intel Integrated Performance Primitives (IPP) Information Disclosure - Lenovo Support US

No description provided...

Intel Patches High-Severity Privilege-Escalation Bugs

Intel on Tuesday patched three high-severity vulnerabilities that could allow the escalation of privileges across an array of products. Overall, the chip giant fixed five bugs – three rated high-severity, and two medium-severity. The most concerning of these bugs is an escalation-of-privilege...

CVE-2018-12155

CVE-2018-12155 affects Intel IPP prior to 2019 update1. Data leakage via cryptographic libraries could allow an authenticated local user to disclose information. Public documentation across multiple sources confirms: vulnerable component is Intel IPP (pre-2019 update1), and the root cause is data...

Intel® Integrated Performance Primitives (Intel® IPP) Advisory

Summary: A potential security vulnerability in Intel® IPP may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12155 Description: Data leakage in cryptographic libraries for IntelR IPP before 2019...

CVE-2017-12155

The CVE-2017-12155 issue is a resource-permission flaw in openstack-tripleo-heat-templates (ceph.client.openstack.keyring created world-readable). A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though they were the OpenStack service, poten...

3Com 3CDaemon 2.0 FTP Username Overflow

This module exploits a vulnerability in the 3Com 3CDaemon FTP service. This package is being distributed from the 3Com web site and is recommended in numerous support documents. This module uses the USER command to trigger the overflow. This module requires Metasploit:...