Important: qemu-kvm

Issue Overview: Quick Emulator QEMU, compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occur while loading a kernel image during the guest boot, if mhloadendaddr address is greater than the mhbssendaddr address. A...

Code injection

DISPUTED Technicolor formerly RCA TC8305C devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-16310. NOTE: Technicolor denies that the described behavior i...

CVE-2018-15907

Technicolor TG588V V2 devices (and TC8305C variants) are reported to allow remote attackers to cause a denial of service (networking outage) by sending a flood of random MAC addresses (MAC flooding), as demonstrated by macof. The vulnerability description notes that Technicolor denies this as a v...

UBUNTU-CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server...

Stack overflow

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15398

Chromium (Chrome) before version 62.0.3202.89 is affected by CVE-2017-15398 and CVE-2017-15399 per the connected Arch Linux advisory. The issue for CVE-2017-15398 is a stack-based buffer overflow in the QUIC component, enabling remote code execution. CVE-2017-15399 is a use-after-free in the V8 J...

CVE-2017-15398

Removed by vendor...

UBUNTU-CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server...

Cross site scripting

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server...

CVE-2017-15407

The CVE-2017-15407 entry concerns an Out-of-bounds write in the QUIC networking stack of Google Chrome, prior to version 63.0.3239.84, allowing a remote attacker to achieve code execution via a malicious server. Affected software is Google Chrome (and Chromium-based components) with the vulnerabl...

CVE-2017-15407

Removed by vendor...

CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server...

CVE-2018-15852

Technicolor TC7200.20 devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while...

Code injection

DISPUTED Technicolor TC7200.20 devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped on...

CVE-2018-15852

CVE-2018-15852 affects Technicolor devices (TC7200.20) where a MAC-address flood (e.g., using macof) can cause a denial-of-service outage in the local network. Related entries describe overlapping impact for Technicolor TG588V V2 (CVE-2018-16310) and Technicolor TC8305C (CVE-2018-15907). The comm...