4559 matches found
CVE-2019-19077
A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering copy to udata failures, aka CID-4a9d46a9fe14...
CVE-2019-19054
A memory leak in the cx23888irprobe function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering kfifoalloc failures, aka CID-a7b2df76b42b...
GraphicsMagick ReadOneJNGImage DoS
The vulnerability of the ReadOneJNGImage function coders/png.c in the cross-platform library for working with graphics, GraphicsMagick, exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted J...
SUSE SLES15 Security Update : squid (SUSE-SU-2019:2975-1)
This update for squid to version 4.9 fixes the following issues : Security issues fixed : CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326...
SUSE-SU-2019:2975-1 Security update for squid
This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. - CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326. -...
Company Detected Years-Long Breach Only After Hacker Maxed Out Servers' Storage
What could be even worse than getting hacked? It's the "failure to detect intrusions" that always results in huge losses to the organizations. Utah-based technology companyInfoTrax Systems is the latest example of such a security blunder, as the company was breached more than 20 times from May 20...
NTSB Investigation of Fatal Driverless Car Accident
Autonomous systems are going to have to do much better than this. The Uber car that hit and killed Elaine Herzberg in Tempe, Ariz., in March 2018 could not recognize all pedestrians, and was being driven by an operator likely distracted by streaming video, according to documents released by the...
MySQL Server DoS
The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL network protocol...
CVE-2019-18807
Two memory leaks in the sja1105staticconfigupload function in drivers/net/dsa/sja1105/sja1105spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service memory consumption by triggering staticconfigbufprepareforupload or sja1105inhibittx failures, aka CID-68501df92d11...
UBUNTU-CVE-2019-18813
A memory leak in the dwc3pciprobe function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption by triggering platformdeviceaddproperties failures, aka CID-9bbfceea12a8...
LLVM Interpreter DoS
The vulnerability of the LLVM interpreter component in the Oracle GraalVM Enterprise Edition lies in access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service failures...
MySQL InnoDB DoS
The vulnerability of the InnoDB component of the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures using the MySQL protocol...
Oracle Java SE Hotspot Unauthorized Access
The vulnerability of the Oracle Java SE software platform’s hotspot component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected data or cause service failures...
Check Point Security Gateway Resource Release DoS
The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by redirecting users to the UserCheck page...
JasPer Heap Buffer Overflow DoS
The vulnerability of the function function jasimagedepalettize libjasper/base/jasimage.c in the JasPer library is due to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and confidentiality, or cause service...
Schneider Electric Industrial Automation Exception DoS
The vulnerabilities of systems for data collection and process control in Schneider Electric’s StruxureWare SCADA Expert, Vijeo Citect, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert, and PowerLogic SCADA systems are related to improper handling of exceptions. Exploiting these...
Check Point Security Gateway Resource Release DoS
The multiple vulnerabilities of Check Point Security Gateway are related to resource release errors. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures remotely...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the blkdrainqueue function in the block/blk-core.c file of the Linux operating system’s kernel is related to the use of this function after error handling. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protecte...
Docker Automation Tool Data Compromise
The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...
Redis HyperLogLog Buffer Overflow DoS
The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This command allows the addition of up to 12 bytes of information beyond the stack limit. Exploiting...