CVE-2015-7673: Improper Restriction of Operations within the Bounds of a Memory Buffer

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

Apple iOS IOStorageFamily Memory Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory initialization vulnerability in Apple iOS IOStorageFamily allows local malicious attackers to exploit the vulnerability to read kernel memory information...

OpenLDAP Denial of Service Vulnerability (CNVD-2015-06013)

OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States, which is included in Linux distributions. A security vulnerability in the 'bergetnext' function in the libraries/liblber/io.c file in OpenLDAP...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

QEMU Programmable Interrupt Timer Controller Heap Overflow Exploit

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=419c4 The programmable interrupt timer PIT controller in QEMU does not correctly validate the channel number when performing IO writes to the device controller, allowing...

QEMU - Programmable Interrupt Timer Controller Heap Overflow

QEMU - Programmable Interrupt Timer Controller Heap Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=419c4 The programmable interrupt timer PIT controller in QEMU does not correctly validate the channel number when performing IO writes to the device controller,...

QEMU - Programmable Interrupt Timer Controller Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=419c4 The programmable interrupt timer PIT controller in QEMU does not correctly validate the channel number when performing IO writes to the device controller, allowing both an information disclosure and heap-overflow...

I-O DATA DEVICE NP-BBRS and WN-G54/R2 Remote Denial of Service Vulnerabilities

The I-O DATA DEVICE NP-BBRS and WN-G54/R2 are both router products from I-O DATA DEVICE Japan. A remote denial of service vulnerability exists in the I-O DATA DEVICE NP-BBRS prior to version 1.03 and the WN-G54/R2 prior to version 1.03. An attacker could exploit this vulnerability to cause a deni...

Apple OS X IOFireWireFamily memory corruption vulnerability (CNVD-2015-05547)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X IOFireWireFamily, which could be exploited by a local user to execute arbitrary code with system privileges...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the ucnviogetConverterName function in the common/ucnvio.cpp file of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a service failure using a specially crafted file...

PT-2015-1672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Description The issue is related to the ucnv io getConverterName function in International Components for Unicode ICU, which mishandles converter names with initial x- substrings. This allows remote...

CVE-2015-5374

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2015-5374

A vulnerability exists in Siemens SIPROTEC 4 and SIPROTEC Compact devices (including EN100 Ethernet modules and Merging Unit 6MU80 ) due to improper input validation . Specifically, specially crafted packets sent to Port 50000/UDP can cause a denial-of-service (DoS) condition, requiring a manual ...

kernel: pipe: iovec overrun leading to memory corruption

It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array...

kernel: pipe: iovec overrun leading to memory corruption

It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array...

kernel: pipe: iovec overrun leading to memory corruption

It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array...

kernel: pipe: iovec overrun leading to memory corruption

It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array...

Multiple Local Memory Corruption Vulnerabilities in Linux Kernel 'fs/pipe.c'

The Linux Kernel is the kernel of the Linux operating system. A memory corruption vulnerability exists in the Linux kernel's implementation of the vectored pipe read/write function, which fails to take into account already processed I/O vectors when retrying after an atomic access operation has...

UBUNTU-CVE-2015-1805

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...