SUSE SLED12 / SLES12 Security Update : gc (SUSE-SU-2016:3057-1)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLED12 / SLES12 Security Update : php5 (SUSE-SU-2016:2975-1)

This update for php5 fixes the following issues : - CVE-2016-9137: Use After Free in unserialize bsc1008029 - CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC bsc986247 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

Internet Bug Bounty: Use After Free Vulnerability in SNMP with GC and unserialize()

https://bugs.php.net/bug.php?id=72479 P.S. This bug can be triggered remotely without call to the gccollectcycles since GC can also be invoked automatically in during deserialization. Like the following code: $xxx, 'yyy' = 1; $callgcpoc = strreplace'yyy', 'xxx', serialize$arr;...

shadow - Firefox/Jemalloc Heap Exploitation Swiss Army Knife

A new, extended and renamed ; version of the Firefox/jemalloc heap exploitation swiss army knife. shadow has been tested with the following: Windows 8.1 x86-64 Windows 7 SP1 x86 and x86-64 WinDBG 6.3.9600.17200 x86 since Firefox stable is x86-only currently pykd version 0.3.0.36 Many different...

PT-2020-5626 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJit versions 2.1.0-beta3 and earlier Description: The issue is related to an out-of-bounds read in LuaJit, caused by mishandled gc handler frame traversal. This can be exploited by a remote attacker to cause a denial of service. The proble...

Internet Bug Bounty: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72434 This vulnerability was discovered during the auditing of a vendor on Hackerone. Similar to our other submission on bugs.php.net and here, this vulnerability is remotely exploitable. Please feel free to ask for more technical details if necessary. Thank you fo...

Internet Bug Bounty: Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72433 This vulnerability was discovered during the auditing of a vendor on Hackerone and could be successfully remotely exploited. The required conditions are a normal PHP setup with a PHP version = 5.3 and 7. Further, it is enough if the remote side uses code like...

gc-forever.com XSS vulnerability

Open Bug Bounty ID: OBB-147656 Description| Value ---|--- Affected Website:| gc-forever.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GC Plugin for Dropbox - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GC Plugin for Dropbox published at the 'play' market has multiple vulnerabilities...

GC - BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application GC published at the 'play' market has multiple vulnerabilities...

PT-2015-7650 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.2.7 Description: The issue allows local users to cause a denial of service via crafted keyctl commands. It is related to the key gc unused keys function in security/keys/gc.c. Recommendations: For Linux kernel...

Oracle: Security Advisory (ELSA-2013-1500)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-245)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

Workbox Plugin loads full HTML of JIRA comment, leads to GC loop of death on large comment

To reproduce: start Confluence with GC logging enabled optional, but helps Link Confluence and JIRA create an issue in JIRA watch it add a large comment to the JIRA issue, e.g. paste a 7.7MB log file between \code\ tags open the workbox in Confluence optional: in network tab of web developer tool...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-devel-7.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the integrity of protected information.

The vulnerability of the gc-7.1 package of the CentOS operating system; its exploitation may lead to the compromise of protected information. The vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-7.1 package of the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the gc-debuginfo-7.1 package of the Red Hat Enterprise Linux operating system can lead to the compromise of protected information. Exploitation of this vulnerability can be carried out remotely...