libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...

libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...

libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash

An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file...

libxkbcommon: NULL pointer dereference when handling xkb_geometry

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkbgeometry section was mishandled...

Wireshark Denial of Service Vulnerability (CNVD-2019-12295)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.DCERPC SPOOLSS dissector is one of the DCERPC SPOOLSS Microsoft Spool Subsystem parsers. A denial...

Wireshark Denial of Service Vulnerability (CNVD-2019-12292)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.TSDNS dissector is one of the TSDNS parsers. A denial of service vulnerability exists in...

Wireshark Null Pointer Dereference Vulnerability (CNVD-2019-18501)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A null pointer dereference vulnerability exists in the TCAP parser in Wireshark versions...

DEBIAN-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

Mozilla: Use-after-free parsing HTML5 stream

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

Wireshark Reuse After Release Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A post-release reuse vulnerability exists in epan/dissectors/packet-enip.c in Wireshark...

Wireshark Denial of Service Vulnerability (CNVD-2019-06166)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 2.6.0 through 2.6.5 and 2.4.0...

Exiv2 SEGV Vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A SEGV vulnerability exists in Exiv2::Internal::TiffParserWorker::findPrimaryGroups in tiffimageint.cpp in Exiv2 0.27-RC3, which can be exploited by a remote attacker to cause a denial of service via...

UBUNTU-CVE-2018-19627

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary...

GoPro gpmf-parser denial of service vulnerability

GoPro gpmf-parser is a telemetry data parser in GPMF format for use in GoPro cameras. A security vulnerability exists in the 'GPMFScaledData' function of the GPMFparser.c file in GoPro gpmf-parser versions prior to 1.2.1. An attacker can exploit this vulnerability to cause a denial of service...

Artifex Ghostscript Type Obfuscation Vulnerability (CNVD-2020-54497)

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02661)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in versions of xkbcommon prior to 0.8.1, which stems from a program that incorrectly handles the xkbFile in the xkbgeometry section, and which can be exploited by a local attacker to...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02669)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ResolveStateAndPredicate' function of the xkbcomp/compat.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker to cause the...

xkbcommon null pointer dereference vulnerability (CNVD-2019-02664)

xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in the 'ExprResolveLhs' function of the xkbcomp/expr.c file in versions of xkbcommon prior to xkbcommon 0.8.2, which can be exploited by a local attacker by submitting a specially...

ALPINE-CVE-2018-15861

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file that triggers an xkbinternatom failure...

DEBIAN-CVE-2018-15862

Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers...