CVE-2020-8265

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method...

UBUNTU-CVE-2020-8265

Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method...

CVE-2020-8265

The CVE-2020-8265 issue is a use-after-free in Node.js TLS handling that affects 10.x, 12.x, 14.x, and 15.x lines. The vulnerability arises when writing to a TLS-enabled socket: node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap; if DoWrite returns no error, t...

Node.js -- January 2021 Security Releases

Node.js reports: use-after-free in TLSWrap High CVE-2020-8265 Affected Node.js versions are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first...

January 2021 Security Releases

January 2021 Security Releases Update 4-Jan-2021 Security releases available Updates are now available for v10,x, v12.x, v14.x and v15.x Node.js release lines for the following issues. In addition to the vulnerabilities listed below, these releases also include an update to npm in order to resolv...

CVE-2019-8265

UltraVNC revision 1207 contains multiple out-of-bounds access vulnerabilities in the VNC client code (notably related to improper usage of the SETPIXELS macro), which can potentially enable remote code execution over a network. In the connected disclosures, these issues are consistently tied to t...

CVE-2018-8265

CVE-2018-8265 affects Microsoft Exchange Server. It is a remote code execution vulnerability in how Exchange parses specially crafted email messages. According to MSRC, an attacker could exploit it by sending a crafted email and convincing a recipient to perform actions while replying, with user ...

KLA11335 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities were found in Microsoft Exchange. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange can be exploited remotely vi...

CVE-2017-8265

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free...

CVE-2017-8265

CVE-2017-8265: A race condition in the Qualcomm video driver (CAF Android builds on Linux kernel) can cause a double free. This is a local issue affecting the video subsystem with potential impact to confidentiality, integrity, and availability as per CVSS metrics, but exploitation status and exa...

CVE-2016-8265

CVE-2016-8265 is rejected and does not represent an active vulnerability entry.

CVE-2016-8265

...

CVE-2015-8265

CVE-2015-8265 affects Huawei Mobile WiFi E5151 and E5186 routers. The issue arises from using static DNS source ports for DNS queries, enabling remote attackers to spoof responses to LAN clients. Affected devices include E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 with firmware prior to V200R00...

Huawei Mobile WiFi E5151 and E5186 routers use insufficiently random values for DNS queries

Overview Huawei Mobile WiFi E5151, firmware version 21.141.13.00.1080, and E5186, firmware version V200R001B306D01C00, use insufficiently random values for DNS queries and are vulnerable to DNS spoofing attacks. Description CWE-330: Use of Insufficiently Random Values - CVE-2015-8265Huawei Mobile...

Security Advisory - DNS Static Source Port Vulnerability in Huawei E5151 and E5186

Huawei E5151 and E5186 allow DNS query packets using the static source port. Attackers can exploit the vulnerability to launch DNS Spoofing Attack and compromise the normal service of DNS. Vulnerability ID: HWPSIRT-2015-10001 This vulnerability has been assigned Common Vulnerabilities and Exposur...