CVE-2020-25602

A flaw was found in Xen, specifically when a guest accesses certain Model Specific Registers where Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISCENABLE MSR, an Intel specific MSR, this MSR read is performed without error handling for a GP...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1379)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14386: Fixed an overflow in tpacketrcv in afpacket that could lead to a local privilege escalation bsc1176069. The following non-security bugs were fixed : -...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0041)

The remote OracleVM system is missing necessary patches to address critical security updates : - can: peakusb: pcanusbfd: Fix info-leaks to USB devices Tomas Bortoli Orabug: 31351221 CVE-2019-19535 - media: hdpvr: Fix an error handling path in hdpvrprobe Arvind Yadav Orabug: 31352053 CVE-2017-166...

CVE-2020-24659

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the...

Unbreakable Enterprise kernel security update

4.1.12-124.42.3 - can: peakusb: pcanusbfd: Fix info-leaks to USB devices Tomas Bortoli Orabug: 31351221 CVE-2019-19535 - media: hdpvr: Fix an error handling path in hdpvrprobe Arvind Yadav Orabug: 31352053 CVE-2017-16644 - fs/binfmtmisc.c: do not allow offset overflow Thadeu Lima de Souza Cascard...

Cisco NX-OS Software IPv6 Protocol Independent Multicast DoS (cisco-sa-nxos-pim-memleak-dos-tC8eP7uw)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability due to improper error handling when processing inbound PIM6 packets. An unauthenticated, remote attacker can exploit this, by sending multiple crafted PIM6 packets to an affected...

Design/Logic Flaw

A vulnerability in the Protocol Independent Multicast PIM feature for IPv6 networks PIM6 of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper error handling when processing...

Denial Of Service (DoS)

aedes is vulnerable to denial of service. A remote attacker is able to crash the server by sending a malicious payload containing a published header and message length as 0 due to improper error handling in writeNumberCached while trying to create a packet for Publish Release...

Cisco FXOS and NX-OS Denial of Service Vulnerabilities (CNVD-2020-50560)

Cisco NX-OS Software and Cisco FXOS Software are both products of Cisco, Inc.Cisco NX-OS Software is a suite of data center-grade operating system software for use in switches.Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances. Cisco FXOS Software is a set ...

The vulnerability of Visual Studio Code’s source editor lies in its error handling after a project is opened, allowing an attacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

PT-2020-3972 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions affected versions not specified Description: The issue is related to errors in handling calls by the splwow64.exe executable file in Microsoft Windows operating systems. This could allow an attacker to obtain...

Denial Of Service (DoS)

xen is vulnerable to denial of service. A guest OS user is able to crash the host OS due to incorrect error handling in an event-channel port allocation...

CVE-2020-13997

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...

CVE-2020-13997

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...

Design/Logic Flaw

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...

CVE-2020-13997

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled...

Improve error handling in commits page and REST endpoint

Adding a trail "%27" at the commits page URL in Bitbucket causes the application to output the error below. !screenshot-1.png|thumbnail! This error is improper error handling as it shows the path to the git executable in the server as well as it exceeds the limits of the error page and does not...

Improve error handling in commits page and REST endpoint

Adding a trail "%27" at the commits page URL in Bitbucket causes the application to output the error below. !screenshot-1.png|thumbnail! This error is improper error handling as it shows the path to the git executable in the server as well as it exceeds the limits of the error page and does not...

Troubleshooting Automated Configuration for Citrix Virtual Apps and Desktops

The Automated Configuration Tool is designed to migrate configurations such as policies, applications, machine catalogs, and others for the following use cases: Virtual Apps and Desktop from one or more On-Premises sites to the Citrix DaaS hosted on Citrix Cloud Migration between different Cloud...

openSUSE Security Update : xen (openSUSE-2020-985)

This update for xen fixes the following issues : - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...