CVE-2019-6138

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...

CVE-2018-16879

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

Fedora 28 : mariadb-connector-c (2018-a55f292297)

MariaDB C / C++ connector Release notes : https://mariadb.com/kb/en/library/mariadb-connector-c-307-release-note s/ Maintainer notes : Marking as a security update, beacuse of fixed resource leaks. Moving libmariadb pkgconfig file to this package from mariadb-devel. Test with MariaDB-3:10.2.19-2...

SUSE SLED15 / SLES15 Security Update : libcdio (SUSE-SU-2018:2236-1)

This update for libcdio fixes the following issues: The following security vulnerabilities were addressed : - CVE-2017-18199: Fixed a NULL pointer dereference in reallocsymlink in rock.c bsc1082821 - CVE-2017-18201: Fixed a double free vulnerability in getcdtextgeneric in cdiogeneric.c bsc1082877...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...

Debian: Security Advisory (DLA-1628-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

Code injection

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20126

Technical details about CVE-2018-20126 are not provided in the supplied documents. No information on affected products, versions, root cause, or fixes is available here; monitor for updates.

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

The vulnerability of the memcached data caching software, related to integer overflows, allows attackers to cause service interruptions.

The vulnerability of the memcached data caching software is related to integer overflows. Exploitation of this vulnerability can occur remotely, leading to resource leaks, data corruption, blocking, or unexpected system shutdowns...

Security update for openssh (moderate)

This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15473: OpenSSH was prone to a user existance oracle vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully...

Google Android Fastboot Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Fastboot is a fastboot component. An information disclosure vulnerability exists in Fastboot in Android. An attacker can exploit this vulnerability to obtain information...

CVE-2018-19213

Netwide Assembler NASM through 2.14rc16 has memory leaks that may lead to DoS, related to nasmmalloc in nasmlib/malloc.c...

resource accounting issues in x86 IOREQ server handling

ISSUE DESCRIPTION Allocation of pages used to communicate with external emulators did not follow certain principles that are required for proper life cycle management of guest exposed pages. IMPACT A compromised DM stubdomain may cause Xen to crash, resulting in a DoS Denial of Service affecting...

Fix for XSA-240 conflicts with shadow paging

ISSUE DESCRIPTION The fix for XSA-240 introduced a new field into the control structure associated with each page of RAM. This field was added to a union, another member of which is used when Xen uses shadow paging for the guest. During migration, or with the L1TF XSA-273 mitigation for PV guests...

A week in security (November 12 – 18)

Last week on Malwarebytes Labs, we found out that TrickBot became a top business threat, so we took a deeper look at what's new with it. With Christmas just around the corner, the Secret Sister scam returned. We also touched on the security and privacy or lack thereof in smart jewelry, air traffi...

CVE-2018-19213

Netwide Assembler NASM through 2.14rc16 has memory leaks that may lead to DoS, related to nasmmalloc in nasmlib/malloc.c...