CVE-2017-17723

Exiv2 0.26 contains a heap-based buffer over-read in Image::byteSwap4 (image.cpp) that can disclose memory or cause a DoS via a crafted TIFF. Public advisories (GLSA-201811-14, Fedora/OpenVAS updates) show this requires upgrading Exiv2; Gentoo guidance specifies >=exiv2-0.26_p20180811-r3 as th...

CVE-2017-17723

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...

Valve: ImageMagick GIF coder vulnerability leading to memory disclosure

Due to CVE-2017-15277, portions of server memory on some steamcommunity web servers could be leaked via image updates. An attacker would not be able to control what memory would be returned, but system information could be obtained. I was able to arbitrarily disclose server memory on...

PT-2018-5525 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue concerns a debug feature in XBLRamDump mode that can be exploited to dump memory contents, potentially leading to local information disclosure. This can be achieved with...

PostgreSQL Memory Disclosure Vulnerability

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in table partitioning ...

InfoZip UnZip Out-of-Bounds Read Vulnerability

UnZip is a utility for extracting compressed files also known as "zipfiles" in .zip format. An out-of-bounds read vulnerability exists in InfoZip UnZip 6.10c22. An attacker could use this vulnerability to cause a denial of service and read sensitive memory...

CVE-2018-1000034

An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory...

ALPINE-CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

Design/Logic Flaw

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CVE-2018-1052

CVE-2018-1052 describes a memory-disclosure vulnerability in PostgreSQL 10.x prior to 10.2. An authenticated attacker can read arbitrary bytes of server memory by issuing a purpose-crafted insert into a partitioned table, exploiting the table-partitioning feature. Affected versions: PostgreSQL 10...

CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CVE-2018-1052

Removed by vendor...

CVE-2018-1052

A memory disclosure vulnerability in table partitioning was found in postgresql, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table...

CCN-lite Memory Disclosure Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A memory leak vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can cause a denial of service memory consumption by exploiting a failure to allocate memory for comp or...

Vulnerability in core server (CVE-2018-1052)

Memory disclosure in table partitioning...

Google Android HTC Component Information Disclosure Vulnerability (CNVD-2018-03847)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which HTC bootloader is a bootloader. An information disclosure vulnerability exists in the HTC bootloader in Android, which stems from the fact that the debugging function can ...

Debian: Security Advisory (DLA-1102-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...