Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in compatibility mode, flashdata from 64-bit userspace may cause disclosure of kernel memory or a fault due to using a userspace-provided address...

[SECURITY] [DSA 3995-1] libxfont security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3995-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2017 https://www.debian.org/security/faq -...

USN-3441-1 curl vulnerabilities

Daniel Stenberg discovered that curl incorrectly handled large floating point output. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2016-9586...

PostgreSQL vulnerabilities

The PostgreSQL project reports: CVE-2017-15098: Memory disclosure in JSON functions CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges...

ImageMagick ReadYUVImage Memory Leak Vulnerability

ImageMagick is an image processing software. A memory disclosure vulnerability exists in ImageMagick coders/yuv.c ReadYUVImage, which allows remote attackers to exploit the vulnerability by submitting a special file, tricking the user into parsing it, and crashing the application...

Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs

Posted by Mateusz Jurczyk of Google Project Zero Patch diffing is a common technique of comparing two binary builds of the same code – a known-vulnerable one and one containing a security fix. It is often used to determine the technical details behind ambiguously-worded bulletins, and to establis...

UBUNTU-CVE-2017-1000100

When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name longer than about 515 bytes, the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used...

ALPINE-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

DEBIAN-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

dnsmasq < 2.78 Multiple Remote Vulnerabilities

The version of dnsmasq installed on the remote host is prior to 2.78, and thus, is affected by the following vulnerabilities : - Denial of service related to handling DNS queries exceeding 512 bytes. CVE-2017-13704 - Heap overflow related to handling DNS requests. CVE-2017-14491 - Heap overflow...

UBUNTU-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

Mozilla Firefox JavaScript Parser Denial of Service Vulnerability

Mozilla Firefox is the United States Mozilla Foundation developed an open source Web browser . JavaScript parser is one of the JavaScript parser . A security vulnerability exists in the JavaScript parser in versions of Mozilla Firefox prior to 56. A remote attacker could exploit this vulnerabilit...

Aerospike Database Server Client Message Memory Disclosure Vulnerability(CVE-2016-9050)

Summary An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be use...

Debian DSA-3983-1 : samba - security update

Multiple security issues have been discoverd in Samba, a SMB/CIFS file, print, and login server for Unix : - CVE-2017-12150 Stefan Metzmacher discovered multiple code paths where SMB signing was not enforced. - CVE-2017-12151 Stefan Metzmacher discovered that tools using libsmbclient did not...

[SECURITY] [DLA 1109-1] libraw security update

Package : libraw Version : 0.14.6-2+deb7u3 CVE ID : CVE-2017-14608 CVE-2017-14608 An out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause...

ImageMagick ReadVIPSImage function memory leak vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory disclosure vulnerability exists in the ReadVIPSImage function in coders/vips.c in ImageMagick, which can be exploited by an attacker to cause a denial of...

Debian DLA-1102-1 : apache2 security update (Optionsbleed)

Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. For Debian 7 'Wheezy', these problems have been fixed in version 2.2.22-13+deb7u12. We recommend that you upgrade your apache2 packages. NOTE: Tenable...

[SECURITY] [DLA 1102-1] apache2 security update

Package : apache2 Version : 2.2.22-13+deb7u12 CVE ID : CVE-2017-9798 Debian Bug : 876109 Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. For Debian 7 "Wheezy", these problems have been fixed in versi...

USN-3426-1 samba vulnerabilities

Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in certain situations. A remote attacker could use this issue to perform a machine-in-the-middle attack. CVE-2017-12150 Stefan Metzmacher discovered that Samba incorrectly handled encryption across DFS redirects. A remote...

Debian DSA-3980-1 : apache2 - security update (Optionsbleed)

Hanno Boeck discovered that incorrect parsing of Limit directives of .htaccess files by the Apache HTTP Server could result in memory disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...