DEBIAN-CVE-2016-5244

The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumptio...

Unspecified vulnerability in libarchive mtree parser

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's mtree parser that can be exploited by an attacker to cause an invalid memory read...

libarchive CPIO Parser Memory Read Vulnerability

libarchive is a multi-format archive and compression library. A memory read vulnerability exists in libarchive's CPIO parser. An attacker can exploit this vulnerability to cause an invalid memory read...

ImageMagick 'VerticalFilter()' function reads across boundaries vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. An out-of-bounds read vulnerability exists in ImageMagick's 'VerticalFilter' function. An attacker can exploit this...

MGASA-2016-0225 Updated kernel packages fix security vulnerabilities

This kernel update provides an upgrade to the upstream 4.4 longterm kernel series, currently based on 4.4.13 and resolves at least the following security issues: The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by...

PT-2017-6844

Name of the Vulnerable Software and Affected Versions Linux kernels versions 4.3-rc1 and later Description The issue is related to an out-of-bounds memory read in the x509 decode time function, located in the x509 cert parser.c file. This problem affects Linux kernels. Recommendations For Linux...

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

CVE-2015-5261: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

ImageMagick 'ContrastStretchImage()' Buffer Overflow Vulnerability - Mac OS X

ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...

ImageMagick Out Of Bounds Memory Read Vulnerability - Mac OS X

ImageMagick is prone to an out of bounds memory read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ImageMagick Out Of Bounds Memory Read Vulnerability - Windows

ImageMagick is prone to an out of bounds memory read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...

CVE-2015-8872

CVE-2015-8872 affects dosfstools: the set_fat function in fat.c can trigger an off-by-two error on FAT12 filesystems when writing an odd number of clusters to the third-to-last entry, potentially causing an invalid memory read and a crash (DoS). Affected is dosfstools prior to 4.0; multiple post-...

Wireshark - erf_meta_read_tag SIGSEGV

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=803 The following SIGSEGV crash due to an invalid memory read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark...

Wireshark - erf_meta_read_tag SIGSEGV

Wireshark - erfmetareadtag SIGSEGV Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=803 The following SIGSEGV crash due to an invalid memory read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr...

Wireshark - erf_meta_read_tag SIGSEGV

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=803 The following SIGSEGV crash due to an invalid memory read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==28415==ERROR:...

UBUNTU-CVE-2016-5105

The megasasdcmdcfgread function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface MFI command...

PT-2016-2679

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the megasas dcmd cfg read function in the hw/scsi/megasas.c file of QEMU, specifically when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support. This...