Important: Red Hat Security Advisory: http-parser security update

An update for http-parser is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of the TCP/IP emulator tcp_emu(), Slirp emulator, and the hardware emulation software QEMU allows a hacker to induce a service failure.

The vulnerability of the tcpemu function slirp/tcpsubr.c of the Slirp TCP/IP emulator and the QEMU hardware emulation software is related to the execution of operations outside the data buffer “scrcv-sbdata”. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2019-10559

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

CVE-2019-10559

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

The vulnerability of the Firefox browser, related to the execution of operations beyond the data buffer, allows attackers to execute arbitrary code.

The vulnerability of the Firefox browser is related to the execution of operations beyond the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Input validation

In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...

FreeBSD-SA-19:23.midi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:23.midi Security Advisory The FreeBSD Project Topic: kernel memory disclosure from /dev/midistat Category: core Module: sound Announced: 2019-08-20 Credits:...

exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2019-13959

In Bento4 1.5.1-627, AP4DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186...

CVE-2019-13959

CVE-2019-13959 affects Bento4 1.5.1-627. The issue is in AP4_DataBuffer::SetDataSize where reallocation failures are not handled, causing a memory copy into a NULL pointer. Related sources (CNVD-2019-28473, RH/SOSV/UBUNTU entries) describe this as a null-pointer dereference that can lead to a cra...

Yubico Security Keys with a Crypto Flaw

Wow, is this an embarrassing bug: Yubico is recalling a line of security keys used by the U.S. government due to a firmware flaw. The company issued a security advisory today that warned of an issue in YubiKey FIPS Series devices with firmware versions 4.4.2 and 4.4.4 that reduced the randomness ...

The vulnerability of the data buffer in Intel’s microprogramming software allows a hacker to gain access to confidential information.

The vulnerability of the MSBDS microprogramming system’s data buffer relates to the improper implementation of micro-optimization measures aimed at improving the efficiency of data writing to RAM. Exploiting this vulnerability allows an attacker to gain access to confidential information...

The vulnerability of Mutt and NeoMutt email clients, related to the execution of operations outside the data buffer, allows attackers to cause service failures.

The vulnerability in the imap/message.c file of the Mutt and NeoMutt email clients relates to the execution of operations outside the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

UBUNTU-CVE-2018-20502

An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4DataBuffer class when called from AP4HvccAtom::Create in Core/Ap4HvccAtom.cpp...

UBUNTU-CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

Exiv2 Buffer Overflow Vulnerability (CNVD-2019-07082)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in the Exiv2::tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27-RC3, which can be exploited by a remote attacker via specially crafted input to cause a denial...

UBUNTU-CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

Bento4 Denial of Service Vulnerability (CNVD-2018-14560)

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in AP4DataBuffer::SetData in the Core/Ap4DataBuffer.cpp file in Bento4 version 1.5.1-624. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference...

UBUNTU-CVE-2018-14588

An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

CVE-2017-13257

In btapandatabufindcback of btapanact.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...