10281 matches found
kernel: Infoleak/use-after-free in __oom_reap_task_mm function in mm/oom_kill.c
The oomreaptaskmm function in mm/oomkill.c in the Linux kernel, before 4.14.4, mishandles gather operations. This allows attackers to cause a denial of service TLB entry leak or use-after-free or possibly have unspecified other impact by triggering a copytouser call within a certain time window...
CVE-2018-17282
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
Stack overflow
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svgstring.c allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because a strncpy copy limit is miscalculated...
Exiv2 Null Pointer Dereference Vulnerability
Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A null pointer dereference vulnerability exists in the Exiv2::DataValue::copy function in value.cpp in Exiv2 0.26, which can be exploited by an attacker to cause a denial of service null pointer...
CVE-2018-17282
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
CVE-2018-17282
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
PYSEC-2018-138
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
CVE-2018-17282
CVE-2018-17282 affects Exiv2 up to v0.26, caused by a NULL pointer dereference in Exiv2::DataValue::copy (value.cpp), leading to an application crash. The connected advisories confirm this issue is addressed by upgrading to Exiv2 0.27.x (e.g., 0.27.2) across affected platforms, indicating remedia...
CVE-2018-17282
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference...
UBUNTU-CVE-2018-15858
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file...
Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation
SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...
pcre: stack-based buffer overflow write in pcre32_copy_substring
Stack-based buffer overflow in the pcre32copysubstring function in pcreget.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service WRITE of size 268 or possibly have unspecified other impact via a crafted file...
pcre: stack-based buffer overflow write in pcre32_copy_substring
Stack-based buffer overflow in the pcre32copysubstring function in pcreget.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service WRITE of size 4 or possibly have unspecified other impact via a crafted file...
Facebook Open Sources Fizz — TLS 1.3 Library For Speed and Security
Facebook has open sourced Fizz—a library designed to help developers implement TLS 1.3 protocol with all recommended security and performance related configurations. Since late last month, Google Chrome web browser has started marking all non-HTTPS websites as 'Not Secure' in an effort to make th...
CVE-2017-16338
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bad0 the value for the host key is copied using strcpy to the buffer at 0xa00016e0. This buffer is 32 bytes large, sending anything longer will cause a buffer...
PT-2018-5046 · Red Hat · Openshift
Name of the Vulnerable Software and Affected Versions: OpenShift 3 affected versions not specified Description: An input validation flaw in OpenShift 3 allows a user to pull an image even without normal access, by using a copy of the manifest associated with the image. This results in the...
ALPINE-CVE-2017-2620
Quick emulator QEMU before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrusbitbltcputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially...
CVE-2018-14590
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Processor::ProcessFragments in Core/Ap4Processor.cpp...