Scientific Linux Security Update : haproxy on SL6.x, SL7.x i386/x86_64 (20150908)

An implementation error related to the memory management of request and responses was found within HAProxy's bufferslowrealign function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session. CVE-2015-3281 %NASLMINLEV...

haproxy: information leak in buffer_slow_realign()

An implementation error related to the memory management of request and responses was found within HAProxy's bufferslowrealign function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the resizecontextbuffers function in Firefox and Firefox ESR browsers arises due to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

A null pointer vulnerability Protection Technology-primary-vulnerability warning-the black bar safety net

Safety history due to a null pointer brought the vulnerability and attacks are numerous, but because of its use of the programming skills required for analysis and protective to have higher requirements, so the domestic to the null pointer vulnerability and a discussion of the related art is not...

CVE-2015-6242

The wmemblocksplitfreechunk function in epan/wmem/wmemallocatorblock.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote...

Cisco IOS Software TFTP DoS (cisco-sa-20150722-tftp)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the TFTP server functionality due to incorrect management of memory when handling TFTP requests. A remote, unauthenticated attacker can exploit this by...

Design/Logic Flaw

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

Cisco IOS and IOS XE TFTP server denial-of-service vulnerability (CVE-2015-0681) allows remote attackers to cause device hang or reload due to improper memory management when processing multiple TFTP requests. Affects several Cisco IOS/IOS XE releases prior to versions 3.6.0S and related branches...

The vulnerability of the Adobe Reader DC PDF viewer program allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader DC PDF viewer program is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code on the client side

The vulnerability of the CSPService::ShouldLoad function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the client side by manipulating the DOM objects...

Blackbone - Windows Memory Hacking Library

Blackbone, Windows Memory Hacking Library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules...

CVE-2015-3720

The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Design/Logic Flaw

The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3720

The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3720

CVE-2015-3720 affects Apple OS X kernel prior to 10.10.4. The issue is a memory-management flaw in kernel-extension APIs that could allow an attacker’s crafted app to disclose kernel memory-layout information. Affected component: the kernel on OS X Yosemite-era builds (pre-10.10.4). Root cause: i...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software arises from the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software arises from the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CUPS print service is vulnerable to privilege escalation and cross-site scripting

Overview CUPS implements the Internet Printing Protocol IPP for UNIX-derived operating systems. Various versions of CUPS are vulnerable to a privilege escalation due to a memory management error. Description CWE-911: Improper Update of Reference Count - CVE-2015-1158An issue with how localized...