8249 matches found
CVE-2017-12418
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...
[SECURITY] [DSA 3945-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3945-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2017 https://www.debian.org/security/faq -...
Week in Security (August 7 – August 13)
Last week, we explained how security certificates work and how malware authors have used them to block security software from being downloaded and executed. We also showed how the Magnitude exploit kit is spreading a Cerber ransomware variant that uses binary padding in an attempt to get skipped,...
openSUSE Security Update : tcmu-runner (openSUSE-2017-919)
This update for tcmu-runner fixes the following issues : - qcow handler opens up an information leak via the CheckConfig D-Bus method bsc1049491 - glfs handler allows local DoS via crafted CheckConfig strings bsc1049485 - UnregisterHandler dbus method in tcmu-runner daemon for non-existing handle...
HBO Offered Hackers $250,000 As Ransom to Prevent More Leaks
Hackers who recently hacked into HBO network and stole scripts, shows, and employee information documents, have now provided an email in which the United States cable channel offered them $250,000. The company offered the payment as a "bounty payment" reward in which companies reward white-hat...
Security update for tcmu-runner (important)
This update for tcmu-runner fixes the following issues: - qcow handler opens up an information leak via the CheckConfig D-Bus method bsc1049491 - glfs handler allows local DoS via crafted CheckConfig strings bsc1049485 - UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler...
openSUSE: Security Advisory for tcmu-runner (openSUSE-SU-2017:2155-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Brave Software: application/x-brave-tab should not be readable.
Summary: It is possible to read a dragged tab object if user is coerced into drag and dropping it into attacker controlled page. This is bad because tab history is mentioned within the object, thus information leaks are possible through a trick. Products affected: Brave: 0.18.14 rev:...
SUSE SLES12 Security Update : tcmu-runner (SUSE-SU-2017:2109-1)
This update for tcmu-runner fixes the following issues : - qcow handler opens up an information leak via the CheckConfig D-Bus method bsc1049491 - glfs handler allows local DoS via crafted CheckConfig strings bsc1049485 - UnregisterHandler dbus method in tcmu-runner daemon for non-existing handle...
Denial Of Service (DoS) Via Memory Leaks
ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be caused by passing a malicious PNG file to ReadOneMNGImage function in coders/png.c...
Memory Leak Vulnerability
ImageMagick is vulnerable to memory leaks. The vulnerability is possible because the ReadMATImage function in coders/mat.c does not properly handle memory, leading to memory leaks that can crash the application...
Denial Of Service (DoS) Via Memory Leaks
ImageMagick is vulnerable to denial of service DoS via memory leaks. The leaks can be caused when a malicious PICT file is passed to the ReadPICTImage function in coders/pict.c...
OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)
It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak...
Denial Of Service (DoS) Through Memory Leaks
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious MAT file to the application to cause memory leaks, leading to the application running out of memory and crashing...
[SECURITY] [DSA 3927-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3927-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 07, 2017 https://www.debian.org/security/faq -...
Debian DSA-3927-1 : linux - security update (Stack Clash)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2017-7346 Li Qiang discovered that the DRM driver for VMware virtual GPUs does not properly check user-controlled values in the...
Design/Logic Flaw
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...
