9192 matches found
The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Jet Database Engine component in the operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
DEBIAN-CVE-2019-18359
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service...
CVE-2019-18359
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service...
USN-4162-2: Linux kernel (Azure) vulnerabilities
USN-4162-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 ESM. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach...
USN-4162-1: Linux kernel vulnerabilities
It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach operations correctly, leading to a use-after-free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...
USN-4157-2 linux-hwe, linux-azure, linux-gcp, linux-gke-5.0 vulnerabilities
USN-4157-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 19.04 for Ubuntu 18.04 LTS. Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly...
Security Bulletin: Vulnerability in IBM HTTP Server affects Netezza Performance Portal
Summary IBM HTTP Server is used by IBM Netezza Performance Portal. IBM Netezza Performance Portal has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2017-7679 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by a buffer overread in...
USN-4157-1: Linux kernel vulnerabilities
Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14814, CVE-2019-14815,...
Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4157-1)
Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14814, CVE-2019-14815,...
MGASA-2019-0297 Updated libpcap and tcpdump packages fix security vulnerabilities
Updated libpcap and tcpdump packages fix security vulnerabilities: The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buffer overread and overflow issues...
Updated libpcap and tcpdump packages fix security vulnerabilities
Updated libpcap and tcpdump packages fix security vulnerabilities: The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buffer overread and overflow issues...
The vulnerability of the HTTP/2 web server implementation of Apache HTTP Server, related to reading beyond the buffer in memory, allows attackers to cause service failures.
The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the NSS library used by Thunderbird email client and browsers Firefox and Firefox ESR allows a malicious actor to gain unauthorized access to information.
The vulnerability of the NSS library for Thunderbird email clients, as well as browsers Firefox and Firefox ESR, relates to reading beyond the buffer during the import of the closed curve25519 key in the PKCS 8 format with leading bytes of 0x00. Exploiting this vulnerability can allow an attacker...
DEBIAN-CVE-2019-17595
There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
UBUNTU-CVE-2019-17594
There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
UBUNTU-CVE-2019-17595
There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
ALPINE-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
DEBIAN-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...