UBUNTU-CVE-2018-1054

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial ...

Design/Logic Flaw

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial ...

Google Chrome < 62.0.3202.94 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 62.0.3202.94. It is, therefore, affected by a vulnerability as referenced in the 201711stable-channel-update-for-desktop13 advisory. - Insufficient data validation in V8 builtins string generator could lead to out of boun...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-35651)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63

An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request...

DEBIAN-CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...

PT-2017-18764 · Autotrace +2 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, which is related to a use-after-free and an invalid heap read in the GET COLOR function in color.c. Recommendations: For AutoTrace version...

RedHat Update for expat RHSA-2016:2824-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome V8 Arbitrary Memory Read Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. An arbitrary memory read vulnerability exists in V8 in versions of Google Chrome prior to 53.0.2785.113. An attacker can exploit this vulnerability to execute...

Debian Security Advisory DSA 3573-1 (qemu - security update)

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the...

Amazon Linux: Security Advisory (ALAS-2016-634)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: libldb security update

Updated libldb packages that fix two security issues are now available for Red Hat Gluster Storage 3.1. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

ldb, libldb, pyldb security update

CentOS Errata and Security Advisory CESA-2016:0009 Updated libldb packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Amazon Linux: Security Advisory (ALAS-2014-451)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2015-0208 Updated libarchive packages fix a security vulnerability

Updated libarchive packages fix security vulnerability: An out-of-bounds read flaw was found in the way libarchive processed certain archives. An attacker could create a specially crafted archive that, when processed by an application using the libarchive library, would cause that application to...

Amazon Linux AMI : xorg-x11-server (ALAS-2015-519)

A buffer over-read flaw was found in the way the X.Org server handled XkbGetGeometry requests. A malicious, authorized client could use this flaw to disclose portions of the X.Org server memory, or cause the X.Org server to crash using a specially crafted XkbGetGeometry request. CVE-2015-0255 C...

CentOS 6 / 7 : xorg-x11-server (CESA-2015:0797)

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Debian Security Advisory DSA 3117-1 (php5 - security update)

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. As announced in DSA 3064-1 it has been decided to follow the stable 5.4.x releases for the Wheezy php5 packages. Consequently the vulnerabilities are addressed by upgradi...

Amazon Linux AMI : php55 (ALAS-2014-451)

An out-of-bounds read flaw was found in the way the File Information fileinfo extension parsed Executable and Linkable Format ELF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file. C Tenable Network Security, Inc. The descripti...

SuSE 11.3 Security Update : file (SAT Patch Number 9982)

file was updated to fix one security issue. - An out-of-bounds read flaw file's donote function. This could possibly lead to file executable crash. CVE-2014-3710 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...