9176 matches found
Security update for openvswitch (moderate)
This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:When...
SUSE-SU-2018:4128-1 Security update for openvswitch
This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:When...
PYSEC-2018-119
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
PYSEC-2018-117
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
The vulnerability of the do_core_note function in the console command “file” allows a perpetrator to trigger a service failure.
The vulnerability of the docorenote function in the console command file is related to an error that causes reading beyond the allocated memory buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially crafted ELF format file...
The vulnerability of Firefox ESR browsers relates to the execution of operations beyond the buffer in memory, which allows an attacker to trigger a service failure or execute arbitrary code.
The vulnerability of Firefox ESR is related to a flaw that causes reading beyond the allocated memory buffer during graphic operations. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
PT-2018-15257 · Exiv2 +5 · Exiv2 +5
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: A heap-based buffer over-read issue exists in the encodeJp2Header function of jp2image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...
DEBIAN-CVE-2018-18313
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
ALPINE-CVE-2018-18313
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...
Medium: openssl
Issue Overview: Libgcrypt allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA...
UBUNTU-CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
UBUNTU-CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
UBUNTU-CVE-2018-19842
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
DEBIAN-CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
radare2 opmov function denial of service vulnerability
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the opmov function in the libr/asm/p/asmx86nz.c file in radare2 versions prior to 3.1.0. An attacker can exploit this vulnerability to cause a denial of service buffer out-of-bounds read...
DEBIAN-CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
DEBIAN-CVE-2018-19763
There is a heap-based buffer over-read at writer.c function: writepngtofile in libsixel 1.8.2 that will cause a denial of service...
ALPINE-CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...