PT-2018-19335

Уязвимость реализации функции ips init phase1, вызываемой из обработчика ips insert device загружаемого модуля drivers/scsi/ips.ko ядра операционной системы Linux вызвана утечкой памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании операционной системы путем...

PT-2018-15075

Name of the Vulnerable Software and Affected Versions libConfuse version 3.2.2 Description The issue is related to a memory leak in the cfg init function in confuse.c. Recommendations For libConfuse version 3.2.2, at the moment, there is no information about a newer version that contains a fix fo...

mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the...

Moderate: Red Hat Security Advisory: rh-mysql57-mysql security update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PT-2018-19035

Name of the Vulnerable Software and Affected Versions Android version 9 Description The issue is related to a missing bounds check in the ixheaacd dec data init function of ixheaacd create.c, which could lead to a possible out of bounds read. This might result in remote code execution without...

init-kc.ru XSS vulnerability

Open Bug Bounty ID: OBB-688518 Description| Value ---|--- Affected Website:| init-kc.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Android (zygote->init;) Chain from USB Privilege Escalation Exploit

Exploit for Android platform in category local exploits After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

Heap overflow

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

CVE-2018-17043

The CVE-2018-17043 entry concerns doc2txt up to 2014-03-19 with a heap-based buffer overflow in Storage::init (Storage.cpp), invoked via parse_doc (parse_doc.cpp). Affected component is doc2txt’s storage initialization logic, and the root cause is a heap buffer overflow within Storage::init. Repo...

CVE-2018-17043

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

doc2txt Heap Buffer Overflow Vulnerability

doc2txt is a tool for extracting text from .doc binary files. doc2txt A heap buffer overflow vulnerability exists in the 'Storage::init' function of the Storage.cpp file in versions 2014-03-19 and earlier. An attacker can exploit this vulnerability to cause a denial of service or code execution...

CVE-2018-17043: Out-of-bounds Write

An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parsedoc in parsedoc.cpp...

PT-2018-13857

Name of the Vulnerable Software and Affected Versions doc2txt versions prior to 2014-03-19 Description The issue is a heap-based buffer overflow in the Storage::init function, located in Storage.cpp, which is called from parse doc in parse doc.cpp. Recommendations For versions prior to 2014-03-19...

Android - zygote-init; Chain from USB Privilege Escalation

Android - zygote-init; Chain from USB Privilege Escalation After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a...

Android - 'zygote->init;' Chain from USB Privilege Escalation

After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a privilege escalation path from zygote to init; that...

CVE-2018-16145

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of...

PT-2018-13558

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1 Description A single byte buffer overflow occurs when handling responses from an esteid Card in the sc pkcs15emu esteid init function in libopensc/pkcs15-esteid.c. This issue could be exploited by attackers...