Wireshark 3.0.x < 3.0.2 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.0.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.2 advisory. - In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was...

Denial Of Service (DoS)

libcurl.so is vulnerable to buffer over-read. There is a flaw in the application when reading RTSP responses, if there are no headers in the RTSP responses the library reads beyond the buffer, leading to the reading of sensitive information beyond the buffer or to the application crashing...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. An attacker could exploit a flaw in the hugetlbmcopyatomicpte function in mm/hugetlb.c. This occurs when freeing pages in hugetlbfs. An attacker could trigger a local denial of service by crashing the kernel...

Fedora 30 : mod_cluster (2019-7813edd5a2)

Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Information Disclosure

Java SE and Java SE Embedded are vulnerable to information disclosure attacks. This allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, which leads to elevated privilege gaining and application crashing...

Denial Of Service (DoS)

Oracle MySQL Server is vulnerable to denial of service DoS attacks. An authenticated user is able to manipulate with an unknown input which leads to denial of service by crashing the application...

Denial Of Service (DoS)

Oracle MySQL Server and MariaDB are vulnerable to denial of service DoS attacks. A remote authenticated user can cause the application to crash via the Options component...

Denial Of Service (DoS)

firefox/thunderbird is vulnerable to denial of service. A remote attacker is able to corrupt memory and crash the application...

Arbitrary Code Execution

CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged...

Arbitrary Code Execution

LibVNCServer is a library that allows for easy creation of VNC server or client functionality. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash o...

Information Disclosure

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2019-0265

SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...

Updated radvd packages fix security vulnerability

A flaw was found in radvd. In case of misconfiguration a race condition between privsep and main thread occurs. This leads to double-free and crashing of radvd rhbz1669297...

CVE-2019-3817

A use-after-free flaw has been discovered in libcomps in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code...

Denial Of Service (DoS)

jasper is vulnerable to denial of service. A JPCCOXRFT assertion failure in the JPCNOMINALGAIN function in jpc/jpct1cod.c allows a remote attacker to crash the application...

Denial Of Service (DoS)

openssl is vulnerable to denial of service DoS attacks. A malicious user can pass a large prime number during a TLS handshake that can cause the client to take a long time generating a key for this, leading to the client hanging and possibly crashing...

Denial Of Service (DoS) Through Out-of-Bounds Write

libvorbis.so is vulnerable to out-of-bounds write. A malicious user can pass a audio file that when processed causes a out-of-bounds write that can lead to arbitrary code execution or to the application crashing...

Out-of-Bounds Read

libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. A vulnerability in the parsing of packets from the /dev/datum device allows a malicious device to send malicious messages that causes ntpd to crash...

CVE-2019-0240

SAP Business Objects Mobile for Android before 6.3.5 application allows an attacker to provide malicious input in the form of a SAP BI link, preventing legitimate users from accessing the application by crashing it...