CVE-2020-17395

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17395

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

SUSE-SU-2020:2240-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

CVE-2020-14362

A flaw was found in X.Org Server. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-14346

A flaw was found in xorg-x11-server. A integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-14361

A flaw was found in X.Org Server. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-17395: Integer Underflow (Wrap or Wraparound)

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2020-5332

Name of the Vulnerable Software and Affected Versions X.Org Server versions prior to 1.20.9 Description A flaw was found in the X.Org Server, where an integer underflow can lead to a heap-buffer overflow, potentially resulting in a privilege escalation issue. The highest threat from this issue is...

PT-2020-5334

Name of the Vulnerable Software and Affected Versions xorg-x11-server versions prior to 1.20.9 Description The issue is related to an integer underflow in the X input extension protocol decoding in the X server, which may lead to arbitrary access of memory contents. This poses a threat to data...

PT-2020-5333

Name of the Vulnerable Software and Affected Versions X.Org Server versions prior to 1.20.9 Description A flaw was found in the X.Org Server, related to an integer underflow in the SProcXkbSelectEvents function, which can lead to a heap-buffer overflow. This issue may result in a privilege...

xorg-server -- Multiple input validation failures in X server extensions

The X.org project reports: All theses issuses can lead to local privileges elevation on systems where the X server is running privileged. The handler for the XkbSetNames request does not validate the request length before accessing its contents. An integer underflow exists in the handler for the...

Parallels Desktop Integer Underflow Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. An integer underflow elevation of privilege vulnerability exists in the prlnaptd process in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of user-supplied data...

PT-2020-14946

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to...

Parallels Desktop Networking Service Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the prlnapt...

CVE-2020-24370: Integer Underflow (Wrap or Wraparound)

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

Huawei EulerOS: Security Advisory for ntfs-3g (EulerOS-SA-2020-1816)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : ntfs-3g (EulerOS-SA-2020-1816)

According to the version of the ntfs-3g packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially...

CVE-2020-6098: Integer Underflow (Wrap or Wraparound)

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger a memory corruption resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-15900: Integer Underflow (Wrap or Wraparound)

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

GLSA-202007-45 : NTFS-3G: Remote code execution, possible privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-45 NTFS-3G: Remote code execution, possible privilege escalation An integer underflow issue exists in NTFS-3G which may cause a heap buffer overflow with crafted input. Impact : A remote attacker may be able to execute...