Google Android elevation of privilege vulnerability (CNVD-2018-26777)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the V4L2SliceVideoDecodeAccelerator::Dequeue in the v4l2slicevideodecodeaccelerator.cc file in Android versions 8.1 and 9, which...

CVE-2018-9538

In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2slicevideodecodeaccelerator.cc, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

CVE-2018-9538

CVE-2018-9538 affects Android (8.1, 9) and relates to V4L2SliceVideoDecodeAccelerator::Dequeue, where an incorrect bounds check enables a possible out-of-bounds read of a function pointer. This could allow local escalation of privilege with no user interaction. The vulnerability is associated wit...

Veeam Availability Console U1 Cumulative Patch 1850

Challenge Veeam Availability Console U1 Cumulative Patch 1850. This update supersedes Veeam Availability Console U1 Cumulative Patch 1824. Cause Please confirm you are running version 2.0.2.1750 or later prior to installing this cumulative patch 1850. You can check this under Windows Programs and...

Medium: python35

Issue Overview: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data...

F5 Networks BIG-IP : vCMP Cavium Nitrox SSL hardware accelerator vulnerability (K52521791)

vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU. CVE-2018-5507 Impact BIG-IP The affected SSL connections are terminated unexpectedly. ARX / BIG-IQ / Enterprise Manager / F5 iWorkflow / LineRate /...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K64552448)

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5534 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produc...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerabilities

Cisco ASA 5506-X with FirePOWER Services etc. are different series of security appliances from Cisco, USA.Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software are the operating systems used in them. A denial of service vulnerability exists in the cryptographic hardwa...

Vulnerability in the Intel Unified Shader compiler for the Intel Graphics Accelerator

Vulnerabilities discovered by Piotr Bania of Cisco Talos Talos is disclosing a pointer corruption vulnerability in the Intel Unified Shader compiler for the Intel Graphics Accelerator. Overview In order for the graphics to be produced, the graphics accelerators need to process the OpenGL scripts...

Intel Unified Shader Compiler for Intel Graphics Accelerator Remote Denial Of Service

Summary An exploitable denial-of-service vulnerability exists in the Intel’s Unified Shader Compiler for IntelR Graphics Accelerator 10.18.14.4889. A specially crafted pixel shader can cause denial-of-service issues. An attacker can provide a specially crafted shader file either in binary or text...

Intel Unified Shader Compiler for Intel Graphics Accelerator Remote Denial Of Service

Summary An exploitable denial of service vulnerability exists in the Intel’s Unified Shader Compiler for IntelR Graphics Accelerator 10.18.14.4889. A specially crafted pixel shader can cause denial-of-service issues. An attacker can provide a specially crafted shader file either in binary or text...

CVE-2018-15383 Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service DoS...

DEBIAN-CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

ALPINE-CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

CVE-2018-14647

CVE-2018-14647 affects Python’s elementtree C accelerator, which failed to initialize Expat’s hash salt. This can enable denial-of-service attacks by triggering pathological hash collisions in Expat’s internal structures, consuming CPU and RAM. Affected versions include Python 3.7.0, 3.6.0–3.6.6,...

CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

UBUNTU-CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to deficiencies in access control when using IPA Internet Protocol Accelerator. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...