Denial of service

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

Information disclosure

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 iLO 4 prior to v2.61, HPE Integrated Lights-Out 3 iLO 3 prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information...

CVE-2018-7101

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

CVE-2018-7101

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

[SECURITY] Fedora 28 Update: yaml-cpp-0.6.1-4.fc28

yaml-cpp is a YAML parser and emitter in C++ written around the YAML 1.2 sp ec...

CVE-2018-7101: Undefined Security Weakness

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

CVE-2018-7105: Undefined Security Weakness

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 iLO 4 prior to v2.61, HPE Integrated Lights-Out 3 iLO 3 prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information...

Product update: Virtuozzo 7.0 Update 8 Hotfix 4 (7.0.8-524)

This update provides a stability fix. Vulnerability id: PSBM-88673 Windows VMs created on Virtuozzo versions prior to 7.0.6 could fail to boot after installing the latest update...

Security update for ffmpeg-4 (low)

This update for ffmpeg-4 to version 4.0.2 fixes the following issues: These security issues were fixed: - CVE-2018-15822: The flvwritepacket function did not check for an empty audio packet, leading to an assertion failure and DoS bsc1105869. - CVE-2018-13300: An improper argument passed to the...

libreoffice/docxfuzzer: Heap-buffer-overflow in emfplushelper::EmfPlusHelperData::processEmfPlusData

Detailed report: https://oss-fuzz.com/testcase?key=5682069892497408 Project: libreoffice Fuzzer: afllibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60500012e124 Crash State:...

CVE-2018-11294: Improper Input Validation

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, WLAN handler indication from the firmware gets the information for 4 access categories. While processing this information only the first 3 AC information is copied due to the improper...

websockets is vulnerable to denial of service by memory exhaustion

The Python websockets library version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appears to be exploitable...

openSUSE Security Update : ffmpeg-4 (openSUSE-2018-1004)

This update for ffmpeg-4 to version 4.0.2 fixes the following issues : These security issues were fixed : - CVE-2018-15822: The flvwritepacket function did not check for an empty audio packet, leading to an assertion failure and DoS bsc1105869. - CVE-2018-13300: An improper argument passed to the...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073

CVE-2018-17073 concerns wernsey/bitmap prior to 2018-08-18, where processing a 4-bit image can trigger a NULL pointer dereference (denial of service). The CNVD/NVD entries confirm a NULL pointer backreference vulnerability in the library used for in-memory and disk bitmap manipulation. Impact is ...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073: NULL Pointer Dereference

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

PT-2018-13878

Name of the Vulnerable Software and Affected Versions wernsey/bitmap versions prior to 2018-08-18 Description The issue allows a NULL pointer dereference via a 4-bit image. Recommendations For versions prior to 2018-08-18, update to a version released after 2018-08-18 to resolve the issue...

openSUSE: Security Advisory for ffmpeg-4 (openSUSE-SU-2018:2723-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...