usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0686-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 68.6.0 ESR MFSA 2020-09 bsc1132665 bsc1166238 CVE-2020-6805: Fixed a use-after-free when removing data about origins CVE-2020-6806: Fixed improper protections against state confusion CVE-2020-6807: Fixed a...

Updated thunderbird packages fix security vulnerabilities

The updated packages fix a security vulnerabilities: Out of bounds reads in sctploadaddressesfrominit. CVE-2019-20503 Use-after-free when removing data about origins. CVE-2020-6805 BodyStream::OnInputStreamReady was missing protections against state confusion. CVE-2020-6806 Use-after-free in cube...

Information Disclosure

libvpx.so is vulnerable information disclosure. A lack of proper validation of data length in the function vp8decodeframe of decodeframe.c leads to an out-of-bound reads during the reading of frames, allowing a user without no additional privilege to disclose information if error correction mode ...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1

March 10, 2020 Andrey Cherepanov 68.6.0-alt1 - New ESR version 68.6.0. - Fix license tag according to SPDX. - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

AZL-35345 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

Out-of-bounds

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

MGASA-2020-0127 Updated libarchive packages fix security vulnerabilities

The updated packages fix several issues including security vulnerabilities: In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. CVE-2019-19221...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

CVE-2019-20503 is an out-of-bounds read in usrsctp’s sctp_load_addresses_from_init. Connected documents confirm affected components (libusrsctp/usrsctp) and indicate versions prior to 0.9.5.0-1 are vulnerable (Mariner packages). A patched version (0.9.5.0-1 or later) is available, per CBLMariner ...

PT-2020-2071

Name of the Vulnerable Software and Affected Versions usrsctp versions prior to 2019-12-20 Description The issue is related to out-of-bounds reads in the sctp load addresses from init function of the usrsctp implementation. This can potentially allow a remote attacker to cause a denial of service...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2020-1893

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 inclusive, versions between 4.9.0 and 4.32.0 inclusive, and versio...

PT-2020-15144

Name of the Vulnerable Software and Affected Versions HHVM versions 4.9.0 through 4.45.0 HHVM versions prior to 4.8.7 Description The issue is caused by insufficient boundary checks when decoding JSON in the handleBackslash function, which can lead to out of bounds memory reads and potentially...

PT-2020-15149

Name of the Vulnerable Software and Affected Versions HHVM versions 4.9.0 through 4.45.0 HHVM versions prior to 4.8.7 Description The issue is caused by insufficient boundary checks when decoding JSON in TryParse, which can lead to out of bounds memory reads, potentially resulting in a denial of...

openSUSE: Security Advisory for nginx (openSUSE-SU-2020:0204-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...