9330 matches found
Vulnerability in OpenSSL - Exploitable out-of-bounds read in X509_cmp_time
X509cmptime does not properly check the length of the ASN1TIME string and can read a few bytes out of bounds. In addition, X509cmptime accepts an arbitrary number of fractional seconds in the time string. An attacker can use this to craft malformed certificates and CRLs of various sizes and...
Vulnerability in OpenSSL - Invalid free in DTLS
This vulnerability does not affect current versions of OpenSSL. It existed in previous OpenSSL versions and was fixed in June 2014. If a DTLS peer receives application data between the ChangeCipherSpec and Finished messages, buffering of such data may cause an invalid free, resulting in a...
PHP 'spl_heap_object_free_storage()' memory misreference vulnerability
PHP is a general-purpose programming language. A memory misreference vulnerability exists in PHP 'splheapobjectfreestorage'. A local attacker could cause a segmentation fault or possibly execute arbitrary code on a target system with web server privileges...
PHP 5.6.9 Use-After-Free Vulnerability
High-Tech Bridge Security Research Lab discovered use-after-free vulnerability in a popular programming language PHP, which can be exploited to cause crash and possibly execute arbitrary code on the target system. The vulnerability resides within the 'splheapobjectfreestorage' PHP function when...
Fedora 20 : php-5.5.25-1.fc20 (2015-8370)
14 May 2015, PHP 5.5.25 Core: - Fixed bug 69364 PHP Multipart/form-data remote dos Vulnerability. Stas - Fixed bug 69403 strrepeat sign mismatch based memory corruption. Stas - Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. Stas - Fixed bug 69522 heap buffer overflow in unpack. Stas - Fix...
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2015:0541-1)
OpenSSL was updated to fix various security issues. Following security issues were fixed : - CVE-2015-0209: A Use After Free following d2iECPrivatekey error was fixed which could lead to crashes for attacker supplied Elliptic Curve keys. This could be exploited over SSL connections with client...
OpenLitespeed 1.3.9 - Use-After-Free (Denial of Service)
/ Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header rows. By looping this request, a memmove call within t...
OpenLitespeed 1.3.9 - Use-After-Free (Denial of Service)
OpenLitespeed 1.3.9 - Use-After-Free Denial of Service / Openlitespeed 1.3.9 Use After Free denial of service exploit. This exploit triggers a denial of service condition within the Openlitespeed web server. This is achieved by sending a tampered request contain a large number 91 of 'a: a' header...
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted ICO image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted BMP image...
CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a crafted GIF image...
Apache Xerces-C XML Parser < 3.1.2 - DoS POC
Exploit for linux platform in category dos / poc Exploit Title: Apache Xerces-C XML Parser file.xml $ DOMPrint ./file.xml Ubuntu 15.04 libxerces-c3.1 package Segmentation fault $ ./DOMPrint ./file.xml ASAN Enabled build =================================================================...
Apache Xerces-C XML Parser 3.1.2 - Denial of Service (PoC)
Apache Xerces-C XML Parser 3.1.2 - Denial of Service PoC Exploit Title: Apache Xerces-C XML Parser file.xml $ DOMPrint ./file.xml Ubuntu 15.04 libxerces-c3.1 package Segmentation fault $ ./DOMPrint ./file.xml ASAN Enabled build =================================================================...
Fedora 20 : php-5.5.24-1.fc20 (2015-6399)
16 Apr 2015, PHP 5.5.24 Apache2handler : - Fixed bug 69218 potential remote code execution with apache 2.4 apache2handler. Gerrit Venema Core : - Fixed bug 66609 php crashes with get and ++ operator in some cases. Dmitry, Laruence - Fixed bug 67626 User exceptions not properly handled in streams...
Internet Bug Bounty: Tokenizer crash when processing undecodable source code
http://bugs.python.org/issue24022 Hello, I would like to report a heap corruption issue in Python/Parser/tokenizer.c:922, affecting latest Python 3.4.3 from python.org and also 2.7 tested 2.7.9-r1 on Gentoo . The latest version available - 3.5.0a3 is also affected. It doesn't seem to affect 3.3...
tcpdump: denial of service
A vulnerability was discovered in print-wb.c that is leading to a segmentation fault triggered through feeding into tcpdump a crafted packet, either from a live network interface or from a .pcap file...
Updated xerces-c packages fix security vulnerabilities
Updated xerces-c packages fix security vulnerability: Anton Rager and Jonathan Brossard from the Salesforce.com Product Security Team and Ben Laurie of Google discovered a denial of service vulnerability in xerces-c. The parser mishandles certain kinds of malformed input documents, resulting in a...
Mandriva Linux Security Advisory : nodejs (MDVSA-2015:142)
Updated nodejs package fixes security vulnerabilities : A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10. In certain circumstances, a particularly deep recursive workload that may trigger a GC and...