973 matches found
SUSE-SU-2019:1733-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2018-16403: Fixed a heap-based buffer over-read that could have led to Denial of Service bsc1107067. - CVE-2016-10254: Fixed a memory allocation failure in alloxateelf bsc1030472. - CVE-2019-7665: NTPLATFORM core fi...
openSUSE Security Update : elfutils (openSUSE-2019-1590)
This update for elfutils fixes the following issues : Security issues fixed : - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure ...
OPENSUSE-SU-2019:1590-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure in...
SUSE SLED15 / SLES15 Security Update : elfutils (SUSE-SU-2019:1486-1)
This update for elfutils fixes the following issues : Security issues fixed : CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 CVE-2017-7609: Fixed a memory allocation failure in...
CVE-2019-12380: Undefined Security Weakness
DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...
Linux kernel memory leak vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory disclosure vulnerability exists in coninsertunipair in drivers/tty/vt/consolemap.c in Linux kernel 5.1.5 and...
EulerOS Virtualization 3.0.1.0 : libpng (EulerOS-SA-2019-1421)
According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before...
Design/Logic Flaw
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
CVE-2019-7582
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
UBUNTU-CVE-2019-7582
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
CVE-2019-7581
CVE-2019-7581 affects libming up to version 0.4.8, where the parseSWF_ACTIONRECORD function in util/parser.c can be triggered by a crafted SWF file to cause memory allocation failure (remote, impact unspecified in description). The vulnerability is described as a remote memory allocation issue wi...
CVE-2019-7582
The CVE-2019-7582 issue affects the libming project (libming 0.4.8 and earlier), specifically the readBytes function in util/read.c. A crafted SWF file can trigger a memory allocation failure, with impact described as unspecified in the provided sources. The publicly available documents do not sp...
CVE-2019-7581: Allocation of Resources Without Limits or Throttling
The parseSWFACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a different vulnerability than CVE-2018-7876...
CVE-2019-7582: Allocation of Resources Without Limits or Throttling
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
PT-2018-10935
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from an unlikely memory allocation failure for the secure pool during boot in Android releases using the Linux kernel. This failure can lead to incorrect pointer access,...
CVE-2017-18277: Loop with Unreachable Exit Condition
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCN5502, SD 210/SD 212/SD...
Design/Logic Flaw
A vulnerability in the Cisco Discovery Protocol CDP module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS condition. The vulnerability is due to incorrect processing of certain C...
CVE-2018-0471 Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability
A vulnerability in the Cisco Discovery Protocol CDP module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS condition. The vulnerability is due to incorrect processing of certain C...
Security Bulletin: IBM Security Access Manager Appliance is affected by Kerberos vulnerabilities (CVE-2017-11368, CVE-2017-7562)
Summary IBM Security Access Manager Appliance has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-11368 DESCRIPTION: MIT Kerberos 5 is vulnerable to a denial of service, caused by a KDC assertion failure. By sending a specially-crafted request, a remote authenticate...