DEBIAN-CVE-2019-10903

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...

CVE-2019-10903

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...

EUVD-2019-2625

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...

UBUNTU-CVE-2019-10903

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

Memory corruption

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

UC Berkeley RISE Opaque contains a boundary-check flaw: ocall_malloc may return a pointer into enclave memory, enabling an arbitrary enclave memory write. Affected: UC Berkeley RISE Opaque (pre-2018-12-01). Root cause: missing boundary check on ocall_malloc. Impact: potential memory corruption wi...

Notepad++: Stack overflow affecting "ext" field on stylers.xml configuration file

Summary: A stack buffer overflow vulnerability affects "ext" field into "stylers.xml" configuration file. "isInList" function doesn't check boundaries on word64 array. Description: Vulnerability src file: notepad-plus-plus/PowerEditor/src/MISC/Common/Common.cpp Vulnerability line: line 329 Variab...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27579)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparametricdrcparsegainsetparams' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of...

DENX U-Boot Buffer Overflow Vulnerability (CNVD-2019-00332)

DENX Software Engineering Das U-Boot is a set of bootloaders from DENX Software Engineering, Germany, that can read device configurations from AES encrypted files. A buffer overflow vulnerability exists in the network image boot in DENX Software Engineering Das U-Boot, which stems from the progra...

CVE-2018-15399 Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

PT-2018-2758 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.10.x through 4.18.x Description: The issue is related to the chap server compute md5 function in the ISCSI target code of the Linux kernel, which incorrectly checks memory access boundaries, leading to a buffer overflo...

FreeBSD : libX11 -- Multiple vulnerabilities (fe99d3ca-a63a-11e8-a7c6-54e1ad3d6335)

The freedesktop.org project reports : The functions XGetFontPath, XListExtensions, and XListFonts are vulnerable to an off-by-one override on malicious server responses. The server replies consist of chunks consisting of a length byte followed by actual string, which is not NUL-terminated. While...

CVE-2016-10427

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

Google Android System Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the sdpserver.cc file in Android in the sdpserverhandleclientreq file, which stems from a lack of boundary detection in the...

Google Android System elevation of privilege vulnerability (CNVD-2018-07448)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp of bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

ARM mbed TLS integer overflow vulnerability

ARM mbed TLS is a product that provides secure communication and encryption capabilities for mbed products. An integer overflow vulnerability exists in ARM mbed TLS. Due to a failure in the sslparseclientpskidentity function, the affected software fails to properly perform boundary checks. An...