Heap overflow

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

CVE-2015-1863

CVE-2015-1863 is a heap-based buffer overflow in wpa_supplicant (versions 1.0–2.4) that can be triggered via crafted SSID information in P2P management frames, allowing denial of service, memory disclosure, or potential arbitrary code execution. Public reports confirm the issue and Debian/CentOS ...

Dnsmasq 'setup_reply()' Denial of Service Vulnerability

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. Dnsmasq suffers from a denial of service vulnerability in its implementation, which can be exploited by a remote user to read the contents of process...

UBUNTU-CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

UBUNTU-CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

PT-2015-5477

Name of the Vulnerable Software and Affected Versions wpa supplicant versions 1.0 through 2.4 Description The issue allows remote attackers to cause a denial of service, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2...

Red Hat Enterprise Linux Elevation of Privilege Vulnerability

Red Hat Enterprise Linux RHEL is a Linux operating system for business users maintained and distributed by Red Hat, Inc. The Linux kernel is the kernel used by the operating system and is distributed by the Linux Foundation. A security vulnerability exists in the InfiniBand IB implementation of...

DEBIAN-CVE-2015-1420

Race condition in the handletopath function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handlebytes value of a file handle during the execution of this functio...

UBUNTU-CVE-2015-1420

Race condition in the handletopath function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handlebytes value of a file handle during the execution of this functio...

libmsm memory corruption

A memory read exploit that uses a vulnerability in the camera driver...

Google Chrome < 39.0.2171.65 Multiple Vulnerabilities

Binary data 8580.pasl...

PT-2015-5275

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19.2 Description A race condition issue exists in the handle to path function in fs/fhandle.c, allowing local users to bypass intended size restrictions. This is achieved by changing the handle bytes value of a...

DEBIAN-CVE-2015-1548

minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read...

PT-2015-4432

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold an...

CVE-2014-8612: Undefined Security Weakness

Multiple array index errors in the Stream Control Transmission Protocol SCTP module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to 1 gain privileges via the stream id to the setsockopt function, when setting the SCTIPSSVALUE option, or 2 read...

PT-2015-4089

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows local users with root access to read data from arbitrary kernel-memory locations by providing a crafted first argument to the IOUSBControllerUserClient::ReadRegister function in...

CVE-2014-8823: Undefined Security Weakness

The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users to read data from arbitrary kernel-memory locations by leveraging root access and providing a crafted first argument...

flash-plugin: Information disclosure via various methods (APSB15-01)

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allo...

Code injection

The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service uninitialized-memory read and...