CVE-2016-1614

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...

UBUNTU-CVE-2016-1614

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...

OpenSSH 'resend_bytes' function information disclosure vulnerability

OpenSSH is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security vulnerability in the 'resendbytes' function in the 'roamingcommon.c file in OpenSSH's client allows a remote attacker to obtain sensitive information from process memory ...

OpenSSH client Information Leak & Buffer Overflow

Since version 5.4 released on March 8, 2010, the OpenSSH client supports an undocumented feature called roaming: if the connection to an SSH server breaks unexpectedly, and if the server supports roaming as well, the client is able to reconnect to the server and resume the suspended SSH session...

Debian DLA-387-1 : openssh security update

The Qualys Security team discovered two vulnerabilities in the roaming code of the OpenSSH client an implementation of the SSH protocol suite. SSH roaming enables a client, in case an SSH connection breaks unexpectedly, to resume it at a later time, provided the server also supports it. The OpenS...

DEBIAN-CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

[SECURITY] [DSA 3446-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3446-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 14, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3446-1 (openssh - security update)

The Qualys Security team discovered two vulnerabilities in the roaming code of the OpenSSH client an implementation of the SSH protocol suite. SSH roaming enables a client, in case an SSH connection breaks unexpectedly, to resume it at a later time, provided the server also supports it. The OpenS...

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

PT-2016-3290

Name of the Vulnerable Software and Affected Versions OpenSSH versions 5.x through 7.x before 7.1p2 Description The issue is related to the resend bytes function in roaming common.c, which allows remote servers to obtain sensitive information from process memory. This can be achieved by requestin...

Debian: Security Advisory (DSA-3446-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2015-8397

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service application crash via an embedded JPEG-LS image with dimension...

Proface GP-Pro EX Out-of-Bounds Read Information Disclosure Vulnerability

Proface GP-Pro EX is human-machine interface HMI software used on multiple platforms. A security vulnerability exists in Proface GP-Pro EX in BeginPreRead when handling malformed 0x7f77 type fields. An attacker could exploit this vulnerability to read out-of-bounds and obtain arbitrary memory...

Microsoft Edge TextData Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Moderate: Red Hat Security Advisory: samba security update

Updated samba packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

QEMU 'net/vmxnet3.c' Denial of Service Vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to disclose host memory and crash the host, denying service to legitimate...

QEMU 'net/vmxnet3.c' denial of service vulnerability (CNVD-2016-00106)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to disclose host memory and crash the host, denying service to legitimate...

Microsoft Edge Multiple Information Disclosure Vulnerabilities (3096448)

This host is missing a critical security update according to Microsoft Bulletin MS15-107. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Remote Memory Disclosure

Overview Versions of bittorrent-dht prior to 5.1.3 are affected by a remote memory disclosure vulnerability. This vulnerability allows an attacker to send a specific series of of messages to a listening peer and get it to reveal internal memory. There are two mitigating factors here, that slightl...

Remote Memory Disclosure

Overview Versions of ws prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow users to control the arguments of a client.ping call will cause ws to send the contents of an allocated but non-zero-filled buffer to the server...