6177 matches found
FreeBSD : chicken -- Potential buffer overrun in string-translate* (0da404ad-1891-11e5-a1cf-002590263bf5)
chicken developer Peter Bex reports : Using gcc's Address Sanitizer, it was discovered that the string-translate procedure from the data-structures unit can scan beyond the input string's length up to the length of the source strings in the map that's passed to string-translate. This issue was...
chicken -- Potential buffer overrun in string-translate*
chicken developer Peter Bex reports: Using gcc's Address Sanitizer, it was discovered that the string-translate procedure from the data-structures unit can scan beyond the input string's length up to the length of the source strings in the map that's passed to string-translate. This issue was fix...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
Cisco Wireless LAN Controller Code Execution
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
UBUNTU-CVE-2015-1805
The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...
CVE-2015-1805
The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...
SUSE SLES11 Security Update : glibc (SUSE-SU-2014:1122-1)
This glibc update fixes a critical privilege escalation vulnerability and the following security and non-security issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available...
SUSE SLES10 Security Update : glibc (SUSE-SU-2014:1128-1)
This glibc update fixes a critical privilege escalation problem and the following security and non-security issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 -...
Fedora 20 : t1utils-1.39-1.fc20 (2015-7581)
t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...
Microsoft Graphics Filters CGM Image Converter Buffer Overrun (MS10-105) - Ver2 (CVE-2010-3945)
Computer Graphics Metafile CGM is a free and open international standard file format for 2D vector graphics, raster graphics, and text. A remote code execution vulnerability has been discovered in the way that Microsoft Office allocates buffer size when handling CGM image files. The vulnerability...
Fedora 21 : t1utils-1.39-1.fc21 (2015-7654)
t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker could use this flaw to crash, or potentially escalate their privileges on, a system over a...
Fedora 22 : t1utils-1.39-1.fc22 (2015-7616)
t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...
Mandriva Linux Security Advisory : t1utils (MDVSA-2015:215)
Updated t1utils package fixes security vulnerabilities : The t1utils package has been updated to version 1.39, which fixes a buffer overrun, infinite loop, and stack overflow in t1disasm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Cisco Nexus 5000 Code Execution
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
MGASA-2015-0167 Updated t1utils packages fix security vulnerabilities
Updated t1utils package fixes security vulnerabilities: The t1utils package has been updated to version 1.39, which fixes a buffer overrun, infinite loop, and stack overflow in t1disasm...
Updated t1utils packages fix security vulnerabilities
Updated t1utils package fixes security vulnerabilities: The t1utils package has been updated to version 1.39, which fixes a buffer overrun, infinite loop, and stack overflow in t1disasm...
PT-2015-7897
Name of the Vulnerable Software and Affected Versions t1utils versions prior to 1.39 Description The issue concerns a buffer overrun, infinite loop, and stack overflow in the t1disasm component of the t1utils package. Recommendations For versions prior to 1.39, update to version 1.39 to resolve t...
