Arbitrary Code Execution

libarchive.so is vulnerable to arbitrary code execution. A use-after-free bug exists in the function archivereadformatrarreaddata in archivereadsupportformatrar.c as it does not properly handle archive files, allowing an attacker to execute arbtirary code in certain ARCHIVEFAILED situation by...

SUSE-SU-2019:2785-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 - CVE-2019-15141: Fixed a divide-by-zero...

PT-2019-4474 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.7 Description: The issue is related to a use-after-free bug in the drivers/usb/misc/adutux.c driver of the Linux kernel. This bug can be triggered by a malicious USB device, potentially leading to a denial o...

Security fix for the ALT Linux 10 package firefox-esr version 68.1.0-alt1

Sept. 4, 2019 Andrey Cherepanov 68.1.0-alt1 - New ESR version 68.1.0. - Fixed: + CVE-2019-11751 Malicious code execution through command line parameters + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea elements using innerHTML +...

DEBIAN-CVE-2019-15551

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

PT-2019-4479 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.9 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/usb/misc/yurex.c driver. This bug can be triggered by a malicious USB device, potentially allowing...

PYSEC-2019-256

In libwebp 0.5.1, there is a double free bug in libwebpmux...

Double free

In libwebp 0.5.1, there is a double free bug in libwebpmux...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1511)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference in dccpwritexmit function in net/dccp/output.c in the Linux kernel allows a local user to cause a deni...

Firefox and Edge Fall to Hackers on Day Two of Pwn2Own

Hackers took down the Mozilla Firefox and Microsoft Edge browsers on Thursday at Pwn2Own, the annual hacking conference held in tandem with CanSecWest, as the competition continued for a second day. The dynamic hacking duo of Amat Cama and Richard Zhu, which make up team Fluoroacetate, had anothe...

openSUSE: Security Advisory for lua53 (openSUSE-SU-2019:0175-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2019:0247-1 Security update for lua53

This update for lua53 fixes the following issues: Security issue fixed: - CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043...

SUSE SLED15 / SLES15 Security Update : lua53 (SUSE-SU-2019:0247-1)

This update for lua53 fixes the following issues : Security issue fixed : CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

Microsoft Edge Chakra JIT Use-After-Free / Flag Issue

Microsoft Edge: Chakra: JIT: JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode just clears DisableImplicitFlags CVE-2019-0568 The JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode method is used to execute JsBuiltIn.js which initializes some builtin objects...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service. A double free bug is triggered when an attacker submits a malicious file to the function parsecodes with newsize = 0 in libarchive/archivereadsupportformatrar.c, causing the process to crash...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This is due to a use-after-free bug where ServerScriptContext is freed before being unregistered, which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...

Information Disclosure

Microsoft Chakracore is vulnerable to information disclosure. This is due to a use-after-free UAF bug when accessing a local Javascript String buffer, which allows an attacker to obtain sensitive information to perform further attacks against the system...