PT-2018-4354

Name of the Vulnerable Software and Affected Versions Jumio SDK versions prior to 1.5.0 for Android Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is done by improperly passing an attacker-controlled pointer to a nati...

PT-2018-4356

Name of the Vulnerable Software and Affected Versions ESRI ArcGis Runtime SDK versions prior to 10.2.6-2 for Android Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an...

CVE-2015-2004: Incorrect Access of Indexable Resource

The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

Amazon Linux AMI : tomcat-native (ALAS-2018-965)

Mishandling of client certificates can allow for OCSP check bypass : When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip...

com.kloudtek.ktspring:ktspring-artemis (1.0), com.kloudtek.ktspring:ktspring-standalone-artemis-hibernate (1.0) +245 more potentially affected by CVE-2017-12174 via org.apache.activemq:artemis-native (>=1.0.0, <=2.3.0)

org.apache.activemq:artemis-native MAVEN version =1.0.0, =2.2.94, =2.2.90, =2.2.97, =2.2.97, =2.2.94, =2.2.90, =2.2.97, =2.2.94, =1.5.0, =2.3.0 - org.apache.activemq.examples.broker:auto-closeable 1.1.0 and more Source cves: CVE-2017-12174 Source advisory: MEND:CVE-2017-12174...

tomcat-native: Mishandling of client certificates can allow for OCSP check bypass

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates th...

tomcat-native: Mishandling of client certificates can allow for OCSP check bypass

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates th...

Medium: tomcat-native

Issue Overview: Mishandling of client certificates can allow for OCSP check bypass: When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing...

Catch! - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Catch! published at the 'play' market has multiple vulnerabilities...

MGASA-2018-0150 Updated tomcat-native package fixes security vulnerability

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected if the OCSP check...

Updated tomcat-native package fixes security vulnerability

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected if the OCSP check...

Doorkeeper gem has stored XSS on authorization consent view

Stored XSS on the OAuth Client's name will cause users being prompted for consent via the "implicit" grant type to execute the XSS payload. The XSS attack could gain access to the user's active session, resulting in account compromise. Any user is susceptible if they click the authorization link...

Debian: Security Advisory (DLA-1276-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4118-1 : tomcat-native - security update

Jonas Klempel reported that tomcat-native, a library giving Tomcat access to the Apache Portable Runtime APR library's network connection socket implementation and random-number generator, does not properly handle fields longer than 127 bytes when parsing the AIA-Extension field of a client...

[SECURITY] [DSA 4118-1] tomcat-native security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4118-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4118-1] tomcat-native security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4118-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2018 https://www.debian.org/security/faq -...

DSA-4118-1 tomcat-native - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4118-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge Chakra JIT - Array Type Confusion via InitProto Instructions

Microsoft Edge Chakra JIT - Array Type Confusion via InitProto Instructions / If a native array is used as a prototype, it is converted to a Var array by the Js::JavascriptNativeFloatArray::SetIsPrototype method. In the JIT compiler, it uses InitProto instructions to set object literals' prototyp...

Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion

/ This is simillar to the previous issue 1457. But this time, we use Array.prototype.reverse. Array.prototype.reverse can be inlined and may invoke EnsureNonNativeArray to convert the prototype of "this" to a Var array. Call flow: JavascriptArray::EntryReverse - FillFromPrototypes -...