PT-2015-5460 · Red Hat +1 · Freeipa +2

Name of the Vulnerable Software and Affected Versions: FreeIPA versions prior to 4.1.4 Description: The issue is related to the get user grouplist function in the extdom plug-in, which does not properly reallocate memory when processing user accounts. This allows remote attackers to cause a denia...

Apple MAC OS X Yosemite IOUSB Controller User Client Function Memory Access Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A memory access vulnerability exists in Apple MAC OS X Yosemite's handling of the IOUSB controller user client function, which allows a privileged application to read arbitrary data from kernel memory...

Apple TV and iOS Kernel Shared Memory Subsystem Elevation of Privilege Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Apple TV and iOS handle a security issue with the kernel's shared memory...

Libssh ssh_packet_kexinit() Double-free Memory DoS

The remote libssh server contains a double-free memory flaw in the sshpacketkexinit function in kex.c. A remote attacker, with a specially crafted SSHMSGKEXINIT packet, can cause a denial of service. TRUSTED...

xorg-x11-server: out of bounds access due to not validating length or offset values in DRI3 & Present extensions

Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

USN-2385-1 openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled memory when parsing DTLS SRTP extension data. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2014-3513 I...

openSUSE Security Update : opera (openSUSE-SU-2011:1172-1)

This update of Opera fixes a memory flaw in the code that processes SVG content which could be exploited by attackers to execute arbitrary code through specially crafted websites. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : opera (openSUSE-SU-2011:1172-1)

This update of Opera fixes a memory flaw in the code that processes SVG content which could be exploited by attackers to execute arbitrary code through specially crafted websites. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

USN-2192-1 openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled memory in the ssl3readbytes function. A remote attacker could use this issue to possibly cause OpenSSL to crash, resulting in a denial of service. CVE-2010-5298 It was discovered that OpenSSL incorrectly handled memory in the dossl3write function...

Apple iOS v7.0.2 5S - Denial of Service Vulnerability (PoC)

Document Title: =============== Apple iOS v7.0.2 5S - Denial of Service Vulnerability PoC References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1106 Video: https://www.youtube.com/watch?v=jf4t0yFoSD8 Release Date: ============= 2013-10-02 Vulnerability Laboratory ID VL-ID:...

Apple iOS v7.0.2 5S - Denial of Service Vulnerability (PoC)

Document Title: =============== Apple iOS v7.0.2 5S - Denial of Service Vulnerability PoC References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1106 Video: https://www.youtube.com/watch?v=jf4t0yFoSD8 Release Date: ============= 2013-10-02 Vulnerability Laboratory ID VL-ID:...

Design/Logic Flaw

The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of service system han...

PT-2013-1350 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 8 Description: The issue is related to the improper handling of objects in memory, allowing remote attackers to execute arbitrary code by accessing an object that was not properly allocated or is deleted...

PT-2013-3038 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Microsoft...

VulnCheck KEV: CVE-2012-1875

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."...

CentOS Update for php CESA-2012:0093 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-1469-1: Linux kernel (EC2) vulnerability

Schacher Raindel discovered a flaw in the Linux kernel's memory handling when hugetlb is enabled. An unprivileged local attacker could exploit this flaw to cause a denial of service and potentially gain higher privileges...

CentOS Update for libpng10 CESA-2009:0340 centos3 i386

Check for the Version of libpng10 OpenVAS Vulnerability Test CentOS Update for libpng10 CESA-2009:0340 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...