CVE-2018-12916

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

CVE-2018-12918

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

Design/Logic Flaw

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

CVE-2018-12916

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

CVE-2018-12918

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

Code injection

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

CVE-2018-12916

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

CVE-2018-12918

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

CVE-2018-12918

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

CVE-2018-12916

The CVE-2018-12916 issue affects the Google Protocol Buffers-based C library PBC (libpbc.a). The vulnerability is a segmentation fault in _pbcP_message_default within proto.c present through versions up to 2017-03-02. Impact is a crash/denial of service, as described in multiple sources (e.g., CN...

CVE-2018-12918

CVE-2018-12918 affects the Google Protocol Buffers C library (PBC) bundled as libpbc.a. The vulnerability is a segmentation fault in the function _pbcB_register_fields within bootstrap.c, reported for PBC builds up to 2017-03-02. Connected documents confirm the fault location, but no concrete exp...

CVE-2018-12916

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

Denial Of Service (DoS)

openpsa/midcom is vulnerable to denial of service Dos attacks. The library uses a vulnerable version of PHP and calls the insecure method xmlparseintostruct. This can allow a malicious user to upload an XML file with the RSS Upload feature to cause a buffer under read or segmentation fault that c...

CVE-2018-12916: Improper Restriction of Operations within the Bounds of a Memory Buffer

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcPmessagedefault in proto.c...

CVE-2018-12918: Improper Restriction of Operations within the Bounds of a Memory Buffer

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

Mozilla Firefox Security Advisories (MFSA2018-15, MFSA2018-17) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (MFSA2018-15, MFSA2018-17) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2018-11473

Name of the Vulnerable Software and Affected Versions PBC versions prior to 2017-03-02 Description The issue is related to a Segmentation fault in the pbcP message default function in proto.c. Recommendations For versions prior to 2017-03-02, update to a version released after 2017-03-02 to resol...

PT-2018-11475

Name of the Vulnerable Software and Affected Versions PBC versions prior to 2017-03-02 Description The issue is related to a Segmentation fault in the pbcB register fields function in bootstrap.c. This fault occurs in the libpbc.a library of PBC. Recommendations For versions prior to 2017-03-02,...

FreeBSD : mozilla -- multiple vulnerabilities (cd81806c-26e7-4d4a-8425-02724a2f48af)

Mozilla Foundation reports : CVE-2018-12359: Buffer overflow using computed size of canvas element CVE-2018-12360: Use-after-free when using focus CVE-2018-12361: Integer overflow in SwizzleData CVE-2018-12358: Same-origin bypass using service worker and redirection CVE-2018-12362: Integer overfl...