88 matches found
CVE-2019-14378
CVE-2019-14378 is a heap-based buffer overflow in SLiRP (ip_reass in libslirp 4.0.0) used by QEMU’s networking, triggered by reassembling large first fragments. The issue can allow a QEMU process crash and, depending on context, may lead to code execution with the host/QEMU process privileges. Co...
CVE-2019-14378
ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
CVE-2018-14378
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2018-14378
CVE-2018-14378 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-14378
EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability."...
CVE-2017-14378
The CVE-2017-14378 issue affects EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C, described as an error handling vulnerability that allows attackers to bypass authentication. Affected components are the RSA Authentication Agent API for C and the SDK for C; th...
[SECURITY] [DSA 792-1] New pstotext packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 792-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2005 http://www.debian.org/security/faq -...