The vulnerability in browsers Firefox and Firefox ESR arises from copying buffers without checking the size of the input data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers, including Firefox ESR, is related to a copying error from memory without checking its size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Xen hypervisors relates to insufficient validation of input data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors relates to the dynamic adaptation of the number of page levels in the IOMMU, in accordance with the size of the address space of the user. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

The vulnerability of the BIND DNS server, related to the simultaneous execution using a shared resource with incorrect synchronization, allows attackers to cause service failures.

The vulnerability of the BIND DNS server is related to an error in processing distorted packets, which can lead to out-of-memory situations. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the data input mechanism in Blink’s Google Chrome browser lies in the lack of a mechanism for verifying the correctness of entered data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

OPENSUSE-SU-2020:0506-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan bsc1142770. - Fixed a permission issue which have resulted in build failures bsc1168170. This update was imported from the SUSE:SLE-15:Update...

Authentication Bypass

openldap is vulnerable to authentication bypass. The vulnerability exists as a flaw was found in the way OpenLDAP handled authentication failures being passed from an OpenLDAP slave to the master. If OpenLDAP was configured with a chain overlay and it forwarded authentication failures, OpenLDAP...

The vulnerability of the ANGLE component in the Google Chrome web browser allows a perpetrator to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.

The vulnerability of the ANGLE browser component in Google Chrome relates to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidenti...

The vulnerability of the exif_read_data function in the PHP programming language allows a perpetrator to gain unauthorized access to information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language is related to the execution of operations that exceed the permissible buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information or cause service failures...

The vulnerability of the managed-keys function in the DNS BIND server allows for unlimited resource distribution, enabling attackers to cause service failures.

The vulnerability of the managed-keys function in the DNS BIND server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to copying buffers without checking the size of the input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Google Chrome browser’s Bluetooth service, related to memory usage after deallocation, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome browser’s Bluetooth service, related to writing beyond the buffer size of memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012 INTRODUCTION The Windows Application Compatibility Update is a software update that improves the compatibility experience in the following Microsoft Windows operating systems: Windows...

CVE-2019-19050

A memory leak in the cryptoreportstat function in crypto/cryptouserstat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering cryptoreportstatalg failures, aka CID-c03b04dcdba1...

SUSE-SU-2020:0957-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan bsc1142770. - Fixed a permission issue which have resulted in build failures bsc1168170...

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

The vulnerability of the create_multipart_context() function in the libapreq2 library, which allows a hacker to cause a service failure

The vulnerability of the createmultipartcontext function in the libapreq2 library is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially crafted HTTP request...

The vulnerability of Huawei’s microprogrammed router software, related to improper cleaning or release of resources, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Product update: Virtuozzo 7.0 Update 13 (7.0.13-298)

The Update 13 for Virtuozzo 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.12.1.vz7.131.10. Vulnerability id: PSBM-95072 'pstorage-target' files are left over after successful migrations of VMs on Virtuozzo Storage from...