kernel: kvm: reporting emulation failures to userspace

It was found that reporting emulation failures to user space could lead to either a local CVE-2014-7842 or a L2-L1 CVE-2010-5313 denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. Please note that on certain...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the srtpunprotect function in the Firefox WebRTC implementation arises due to a loss of precision in integer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects such as memory corruption from a remote location...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Brotli algorithm implemented in the Firefox browser arises from the loss of precision for integer operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using specially crafted data compressed using the...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the nsHtml5TreeBuilder class in the Thunderbird HTML5 client browser, as well as in Firefox and Firefox ESR browsers, arises due to a loss of precision. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure disruption of resourc...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ProcessCommandsInternal function in the Brotli data compression algorithm used by Google Chrome can be exploited due to a loss of precision in integer calculations. Exploiting this vulnerability may allow an attacker to cause a service failure buffer overflow, or possibly...

chromium-browser: out-of-bounds read in PDFium

pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...

Vulnerabilities in the Grub2 operating system loaders, which allow attackers to obtain confidential information or cause service failures

The multiple vulnerabilities of the Grub2 operating system’s loader are caused by a loss of precision for an integer. Exploiting these vulnerabilities allows a local attacker to bypass authentication procedures, obtain confidential information, or cause a service failure disk corruption by using...

Lt Gen David Deptula on Desert Storm and Islamic State

This weekend Vago Muradian interviewed Lt Gen ret David Deptula, most famous for his involvement as a key planner for the Desert Storm air campaign. I recommend watching the entire video, which is less than 8 minutes long. Three aspects caught my attention. I will share them here. First, Lt Gen...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Metadata::setData function found in MetaData.cpp in libstagefright in Firefox and Firefox ESR browsers arises due to a loss of precision for integer operations. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using an...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability in the implementation of the HTTP/2 protocol in Firefox browsers arises from the loss of precision in calculations. Exploiting this vulnerability allows a malicious actor to cause a service failure—the appearance of an error message indicating “Assertion failure” or an emergency...

Oracle Linux 7 : wireshark (ELSA-2015-2393)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2393 advisory. - Related: CVE-2015-6244 - Resolves: CVE-2015-3182 - Resolves: CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6248 - Resolves:...

wireshark security, bug fix, and enhancement update

1.10.14-7.0.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.10.14-7 - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvblengthremaining is used - Related: CVE-2015-6244 1.10.14-6 - Security patch - Resolves: CVE-2015-3182 1.10.14-5 - Fix crash...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is due to a loss of integer precision. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted MPEG-4 format data...

UBUNTU-CVE-2015-5219

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service infinite loop via a crafted NTP packet...

sqlite: stack buffer overflow in src/printf.c

It was found that SQLite's sqlite3VXPrintf function did not properly handle precision and width values during floating-point conversions. A local attacker could submit a specially crafted SELECT statement that would crash the SQLite process, or have other unspecified impacts...

sqlite: stack buffer overflow in src/printf.c

It was found that SQLite's sqlite3VXPrintf function did not properly handle precision and width values during floating-point conversions. A local attacker could submit a specially crafted SELECT statement that would crash the SQLite process, or have other unspecified impacts...

GE Healthcare Precision MPi Built-in Account Vulnerability

GE Healthcare Precision MPi is an MPi system for the healthcare industry. GE Healthcare Precision MPi has built-in accounts; serviceapp users use the 'orion' password; clinical operator users use the 'orion' password; and administrator users use the 'PlatinumOne' password, allowing remote attacke...

Multiple Dell devices vulnerable

Dell Latitude, etc. are the products of the United States Dell Dell company.Dell Latitude and OptiPlex are notebook product models; Precision Mobile Workstation is a precision mobile workstation; Precision Workstation CS is a set of mobile workstation Client; BIOS Basic Input-Output System is a s...

CVE-2014-7233

GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...

CVE-2012-6660

GE Healthcare Precision MPi has a password of 1 orion for the serviceapp user, 2 orion for the clinical operator user, and 3 PlatinumOne for the administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent ...