PT-2019-10151

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.5.1-627 Description: An issue was discovered in the AP4 StcoAtom class, which is located in Core/Ap4StcoAtom.cpp. This issue occurs when the AP4 AtomFactory::CreateAtomFromStream function in Core/Ap4AtomFactory.cpp calls the...

CVE-2018-20659: Allocation of Resources Without Limits or Throttling

An issue was discovered in Bento4 1.5.1-627. The AP4StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp, as demonstrated by mp42hls...

DEBIAN-CVE-2018-20543

There is an attempted excessive memory allocation at libxsmmsparsecscreader in generatorspgemmcscreader.c in LIBXSMM 1.10 that will cause a denial of service...

CVE-2018-20543

There is an attempted excessive memory allocation at libxsmmsparsecscreader in generatorspgemmcscreader.c in LIBXSMM 1.10 that will cause a denial of service...

CVE-2018-20543

There is an attempted excessive memory allocation at libxsmmsparsecscreader in generatorspgemmcscreader.c in LIBXSMM 1.10 that will cause a denial of service...

CVE-2018-20502

An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4DataBuffer class when called from AP4HvccAtom::Create in Core/Ap4HvccAtom.cpp...

Null pointer dereference

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20125

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

PT-2018-15287

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered that allows attackers to trigger an attempted excessive memory allocation. This is related to the AP4 DataBuffer::SetDataSize and AP4 DataBuffer::ReallocateBuffer functions in...

CVE-2018-20186: Uncontrolled Resource Consumption

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

PT-2018-3504

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to errors in pointer dereferencing in the PVRDMA emulator hardware component of QEMU. It may allow a remote attacker to cause a denial of service by creating CQ/QP objects...

Medium: nginx

Issue Overview: nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngxhttpv2module not compiled by default if the 'http2' option of the 'listen' directive is used i...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095: Allocation of Resources Without Limits or Throttling

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

PT-2018-15255

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered in the EnsureCapacity function in Core/Ap4Array.h. It allows crafted MP4 input to trigger an attempt at excessive memory allocation. Recommendations For Bento4 version 1.5.1-627,...

MGASA-2018-0459 Updated nginx package fixes security vulnerabilities

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption CVE-2018-16843. nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage...