Diffoscope may write to arbitrary locations due to an untrusted archive

diffoscope before 76 writes to arbitrary locations on disk based on the contents of an untrusted archive...

PT-2018-7246

Name of the Vulnerable Software and Affected Versions: GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 GIGABYTE BRIX UEFI firmware for the GB-BXi7-5775 version F2 Description: The issue concerns the insecure implementation of certain features in the UEFI firmware, specifically BIOSWE...

CVE-2017-3197: Protection Mechanism Failure

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...

Multiple Vulnerabilities in Phusion Passenger SpawningKit

Phusion Passenger is an Apache module from Phusion Netherlands for deploying Ruby on Rails projects on Apache and Nginx web servers.SpawningKit is one of the components. A security vulnerability exists in SpawningKit in version 5.3.x of Phusion Passenger prior to 5.3.2. An attacker can exploit th...

CVE-2018-12026: Improper Link Resolution Before File Access

During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in...

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2018-11854)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in the parsing of the U3D Texture Width framework in Foxit Reader version 9.0.0.29935, which stems from the program failing to properly validate the length of user-submitted data,...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1001-1)

This update for the Linux Kernel 3.12.61-5292 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...

CVE-2015-9134

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

Null pointer dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

CVE-2015-9134

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

PT-2019-14263

Name of the Vulnerable Software and Affected Versions ncurses versions through 5.99.0 Description The issue is related to format string problems in printw functions due to the mishandling of C format arguments. Additionally, there are buffer overflow issues because buffers without length are pass...

PT-2018-4470

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs while processing QSEE Syscall 'qsee macc gen ecc privkey' in Android, resulting in an untrusted pointer dereference. This could lead to arbitrary write. The...

CVE-2015-9134: NULL Pointer Dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

PYSEC-2018-83

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-1068

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory...

CVE-2018-1068: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory...

CVE-2017-6282

CVE-2017-6282 affects the NVIDIA Tegra kernel driver (NVMAP) where an attacker can write an arbitrary value to an arbitrary location, potentially causing privilege escalation. Documents confirm the vulnerability in the Tegra kernel driver and NVMAP component, with CVSS v3.0 scores (9.3 base, high...

CVE-2017-6282

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

PT-2018-8330

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra affected versions not specified Description The NVIDIA Tegra kernel driver contains an issue in NVMAP, allowing an attacker to write an arbitrary value to any location, potentially leading to privilege escalation. Recommendations ...