3040 matches found
Google Patches Critical Vulnerabilities in Android OS
Google patched six critical remote code execution flaws in its Android operating system as part of its October Android Security Bulletin. Four of those remote code execution flaws are tied to Android’s Media framework and impact a wide range of Android devices including Google’s Pixel and Nexus...
SUSE-SU-2018:2978-1 Security update for unzip
This update for unzip fixes the following security issues: - CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to...
openSUSE Security Update : nodejs8 (openSUSE-2018-1047)
This update for nodejs8 to version 8.11.4 fixes the following issues : Security issues fixed : - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 - Upgrade to OpenSSL 1.0.2p, which fixed : -...
Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities
Multiple vulnerabilities in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerabilities ar...
PT-2018-13005
Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...
PT-2018-13004
Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...
Security update for nodejs8 (moderate)
This update for nodejs8 to version 8.11.4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 - Upgrade to OpenSSL 1.0.2p, which fixed: -...
SUSE-SU-2018:2812-1 Security update for nodejs8
This update for nodejs8 to version 8.11.4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer bsc1105019 - Upgrade to OpenSSL 1.0.2p, which fixed: -...
CVE-2018-11267: Improper Validation of Array Index
In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429,...
CVE-2018-11895: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame...
PT-2018-6009
Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue arises when processing the function for writing device values into flash,...
Netwide Assembler (NASM) Invalid Memory Write Vulnerability
Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. An invalid memory write vulnerability exists in the 'expandsmacro' function of the preproc.c file in NASM version 2.14rc15, which can be exploited by an attacker to cause a denial of service invalid...
DEBIAN-CVE-2018-16999
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
CVE-2018-16999
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
CVE-2018-16999
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
UBUNTU-CVE-2018-16999
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
CVE-2018-16999
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
Input validation
Netwide Assembler NASM 2.14rc15 has an invalid memory write segmentation fault in expandsmacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file...
CVE-2018-16999
CVE-2018-16999 affects Netwide Assembler (NASM) up to version 2.14rc15, where an invalid memory write (segmentation fault) in expand_smacro (preproc.c) can cause a denial of service with a crafted input file. Connected advisories corroborate the issue across multiple distributions (openSUSE/Magei...
