CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

Heap overflow

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

CCN-lite 2.0.1 contains a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache caused by an array lacking a terminating '\0' when reading binary CCNx/NDN files. The issue leads to heap corruption. Remediation implemented: memory management in mkAddToRelayCacheRequest ...

Malware analysis: decoding Emotet, part 2

In part two of our series on decoding Emotet, you can catch up on part 1 here, we'll cover analysis of the PowerShell code. Before we do that, however, it is a good idea to list some of the functions and calls that are used in the code for the execution. System.Runtime.InteropServices.Marshal: us...

kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c

A flaw was found in the Linux kernel when freeing pages in hugetlbfs. This could trigger a local denial of service by crashing the kernel...

kernel: Improper error handling of VM_SHARED hugetlbfs mapping in mm/hugetlb.c

A flaw was found in the Linux kernel when freeing pages in hugetlbfs. This could trigger a local denial of service by crashing the kernel...

The vulnerability of the MiniPS::delete0 function in the Sam2p image conversion utility allows a attacker to cause a service failure or exert other effects.

The vulnerability of the MiniPS::delete0 function minips.cpp in the Sam2p image conversion utility is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Cisco IOS XE Software Simple Network Management Protocol Subsystem Denial of Service Vulnerability

Cisco IOS XE Software is the United States Cisco Cisco company's set of network equipment for the development of the operating system.Simple Network Management Protocol SNMP subsystem is one of the simple network management subsystem for the exchange of network device management information. A...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180313) (Meltdown) (Spectre)

Security Fixes : - hw: cpu: speculative execution branch target injection s390-only CVE-2017-5715, Important - hw: cpu: speculative execution bounds-check bypass s390 and powerpc CVE-2017-5753, Important - hw: cpu: speculative execution permission faults handling powerpc-only CVE-2017-5754 Bug...

KLA11204 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities possibly to cause denial of service or spoof user interface. Below is a complete list of vulnerabilities: 1. Incorrect processing of AppMenifests can be exploited remotely to perfo...

Linux kernel 'madvise_willneed' function denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'madvisewillneed' function in the mm/madvise.c file in versions of Linux kernel prior to 4.14.4. A local attacker can exploit th...

DEBIAN-CVE-2017-18202

The oomreaptaskmm function in mm/oomkill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service TLB entry leak or use-after-free or possibly have unspecified other impact by triggering a copytouser call within a certain time window...

Design/Logic Flaw

The oomreaptaskmm function in mm/oomkill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service TLB entry leak or use-after-free or possibly have unspecified other impact by triggering a copytouser call within a certain time window...

CVE-2017-18202

The oomreaptaskmm function in mm/oomkill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service TLB entry leak or use-after-free or possibly have unspecified other impact by triggering a copytouser call within a certain time window...

Linux kernel denial of service vulnerability (CNVD-2018-06440)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the Linux kernel prior to 4.14.4. The vulnerability arises because the...

The vulnerability of the Mozilla Firefox ESR browser, related to memory-related errors, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox ESR browser is related to errors in memory management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2017-18075

crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AFALG-based AEAD interface CONFIGCRYPTOUSERAPIAEAD and pcrypt CONFIGCRYPTOPCRYPT to cause a denial of service kfree of an incorrect pointer or possibly have unspecified other...

Debian: Security Advisory (DLA-937-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel denial of service vulnerability (CNVD-2018-03215)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel. T...