CVE-2019-8576

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2019-8560

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory...

CVE-2019-8542

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges...

CVE-2019-8508

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges...

CVE-2019-8517

CVE-2019-8517 is an out-of-bounds read in Apple’s TrueTypeScaler/font processing component. Affects iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Exploitation could lead to disclosure of process memory. The vulnerability is addressed by the listed fixed OS versions; no exploit detai...

CVE-2019-8508

CVE-2019-8508 describes a kernel-level buffer overflow vulnerability where mounting a maliciously crafted NFS network share could lead to arbitrary code execution with kernel/system privileges. The issue is addressed bymacOS Mojave 10.14.4 via improved bounds checking in the kernel path handling ...

CVE-2019-8520

CVE-2019-8520 is an out-of-bounds read vulnerability in macOS that was addressed by improved bounds checking. The issue could allow a malicious application to read restricted memory and is fixed in macOS Mojave 10.14.4 (Security Update). The available sources consistently describe the fix as part...

CVE-2019-8519

CVE-2019-8519 is an out-of-bounds read vulnerability in macOS components that was mitigated by improved bounds checking. The issue could allow an application to read restricted memory and is addressed in macOS Mojave 10.14.4. Public references in the connected data confirm the root cause as an ou...

About the security content of Xcode 11.3

About the security content of Xcode 11.3 This document describes the security content of Xcode 11.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Security Bulletin: IBM® Db2® is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2018-1936).

Summary Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code as root. Vulnerability Details CVEID: CVE-2018-1936 DESCRIPTION: IBM DB2 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could...

About the security content of iCloud for Windows 10.7 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

macOS 10.15.x < 10.15.1 / 10.14.x < 10.14.6 Security Update 2019-001 / 10.13.x < 10.13.6 Security Update 2019-006

The remote host is running a version of macOS or Mac OS X that is 10.15.x prior to 10.15.1, 10.14.x prior to 10.14.6 security update 2019-001, 10.13.x prior to 10.13.6 security update 2019-006. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the...

Xen Project Descriptor Table Limit Checking Privilege Escalation Vulnerability (XSA-298)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a privilege escalation vulnerability due to improper bounds checking for descriptor table accesses. An authenticated attacker, in user mode on a 32-bit guest, could leverage this...

For libssh2 integer overflow vulnerability (CVE-2019-17498)analysis-vulnerability warning-the black bar safety net

0x01 vulnerability mining In 2019 3 December 18, Canonical Ltd. Chris Coulson discloses libssh2 nine of vulnerability, CVE-2019-3855 to CVE-2019-3863-in. These vulnerabilities have been in the libssh2 v1. 8. 1 repair. At the time, my colleague Pavel Avgustinov note that fix vulnerabilities report...

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2017-5731

CVE-2017-5731 is referenced across multiple advisories in connected documents, notably in EDK II/TianoCompress code where bounds checking in Tianocompress before 2017-11-07 could allow an authenticated local attacker to escalate privileges. The Ubuntu USN-6920-1 entry explicitly lists CVE-2017-57...

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access...