boost: Heap-buffer-overflow in boost::detail::shared_count::~shared_count

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6641095329972224 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

boost: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=4946144398409728 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

boost: Stack-buffer-overflow in boost::re_detail_NUMBER::perl_matcher<std::__1::__wrap_iter<char const*>, std::_

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6390503111131136 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

Google Android Libraries Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Libraries libminikin is one of the Minikin libraries. A boost vulnerability exists in Librarieslibminikin in Android. An attacker can exploit this vulnerability to execute arbitrary...

dlplibs: Index-out-of-bounds in boost::spirit::traits::pow10_helper<double, void>::call

Detailed report: https://oss-fuzz.com/testcase?key=4891413823094784 Project: dlplibs Fuzzer: libFuzzerdlplibsvdxfuzzer Fuzz target binary: vdxfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Google Android Qualcomm Video Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video driver is a video driver developed by Qualcomm. The Qualcomm Video driver in Android is vulnerable to a boost vulnerability. An attacker can exploit this vulnerability ...

dlplibs: Global-buffer-overflow in boost::spirit::traits::pow10_helper<double, void>::call

Detailed report: https://oss-fuzz.com/testcase?key=5309012033667072 Project: dlplibs Fuzzer: afldlplibsvsdxfuzzer Fuzz target binary: vsdxfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000009b69c8 Crash State:...

HTTP/2 push is tougher than I thought

"HTTP/2 push will solve that" is something I've heard a lot when it comes to page load performance problems, but I didn't know much about it, so I decided to dig in. HTTP/2 push is more complicated and low-level than I initially thought, but what really caught me off-guard is how inconsistent it ...

dlplibs: Global-buffer-overflow in boost::spirit::char_encoding::ascii::isspace

Detailed report: https://oss-fuzz.com/testcase?key=6346507265507328 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008f4ceb Crash State:...

FreeBSD : moodle -- multiple vulnerabilities (f72d98d1-0b7e-11e7-970f-002590263bf5)

Marina Glancy reports : - MSA-17-0001: System file inclusion when adding own preset file in Boost theme - MSA-17-0002: Incorrect sanitation of attributes in forums - MSA-17-0003: PHPMailer vulnerability in no-reply address - MSA-17-0004: XSS in assignment submission page %NASLMINLEVEL 70300 C...

Local Elevation of Privilege Vulnerability in Multiple Intel Products

Intel Parallel Studio X is a suite of software for improving application performance and big data analytics; Intel Inspector is a suite of tools for dynamically testing applications for memory access errors and thread access errors. Intel Inspector is a set of tools specialized in dynamically...

DD replication causes panic error on the target Data Domain server

Challenge You have configured a Data Domain Storage Unit as a Veeam backup repository using MTree replication. Data Domain replication results in PANIC on the target Data Domain storage. Cause Veeam Backup & Replication leverages the Virtual Synthetic VS feature of the DD Boost library for buildi...

Moodle 3.0.x < 3.0.8 Multiple Vulnerabilities

Binary data 9922.prm...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-17-0001: System file inclusion when adding own preset file in Boost theme MSA-17-0002: Incorrect sanitation of attributes in forums MSA-17-0003: PHPMailer vulnerability in no-reply address MSA-17-0004: XSS in assignment submission page...

Fedora 24 : community-mysql (2016-c7e60a9fd4)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-c7e60a9fd4 advisory. Mon Dec 12 2016 Norvald H. Ryeng - 5.7.17-1 - Update to MySQL 5.7.17, for various fixes described at...

Fedora 25 : community-mysql (2016-9b83c6862d)

The remote Fedora 25 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-9b83c6862d advisory. Mon Dec 12 2016 Norvald H. Ryeng - 5.7.17-1 - Update to MySQL 5.7.17, for various fixes described at...

Manalyze - A static analyzer for PE executables

Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior. A static analyzer for PE files Manalyze was written in C++ for Windows and Linux and is released under the terms of the GPLv3 license . It is a robust parser for PE files with a flexible...

Drupal Boost Module Information Disclosure Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Boost is one of the modules that improves the performance of a website by optimizing page caching of static files for anonymous users. An information disclosure vulnerability exists in...

Boost - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-021

This module provides static page caching for Drupal enabling a very significant performance and scalability boost for sites that receive mostly anonymous traffic. The module doesn't prevent form cache from leaking between anonymous users which could result in information disclosure, where one use...

Boost 2 Lite - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Boost 2 Lite published at the 'play' market has multiple vulnerabilities...