Important: Red Hat Security Advisory: python security update

An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2018-13909

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2018-13909

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Ubuntu: Security Advisory (USN-4001-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. A local authenticated attacker could cause a null pointer dereference in dccpwritexmit leads to a system crash via crafted system calls...

The vulnerability of the mempcpy function in libraries that handle system calls and core glibc functions allows a hacker to execute arbitrary code.

The vulnerability of the mempcpy function in the library that handles system calls and core functions of glibc is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability in the implementation of the mempcpy function in libraries that handle system calls and core glibc functions allows a perpetrator to cause a service failure.

The vulnerability in the implementation of the mempcpy function in libraries that handle system calls and core glibc functions arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DOS attacks. This is due to mishandling of inheritance of the sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel. Local users could cause a denial of service or possibly have unspecified other impact via crafted system calls...

Out-Of-Bounds Read

Linux kernel is vulnerable to out-of-bounds reads. This is because the IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option. Local users could cause a denial of service or possibly have unspecified other impact via...

Privilege Escalation

Linux kernel is vulnerable to privilege escalation attacks. There exist a race condition in kernel/events/core.c in the Linux kernel. Local users could gain privileges via a crafted application that makes concurrent perfeventopen system calls for moving a software group into a hardware context...

Denial Of Service (DOS)

Linux kernel is vulnerable to the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls. Local users could cause an application crash via a crafted application that makes sendto system calls, related...

Information Disclosure

kernel-rt is vulnerable to information disclosure. Failure to initialize certain data structure in the dotkill function in kernel/signal.c allows a local user to retrieve confidential information from the kernel memory via a malicious application with tkill and tgkill system calls...

Explore the PHP Mkdir function-vulnerability warning-the black bar safety net

A, causes In the reproducibility analysis of Wordpress-5.0.0 RCE of the time, because in the written pictures of the process, according to the picture dirname create the directory, then according to the basename of the write picture. In the directory is successfully created, the premise should be...

Sony Playstation 4 (PS4) 6.20 - WebKit Code Execution (PoC)

Sony Playstation 4 PS4 6.20 - WebKit Code Execution PoC PS4 6.20 WebKit Code Execution PoC ============== This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as...

CVE-2019-5595

In FreeBSD before 11.2-STABLEr343782, 11.2-RELEASE-p9, 12.0-STABLEr343781, and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from system calls, potentially allowing some kernel data used in the system call to be exposed...

CVE-2019-5595

Removed by vendor...

FreeBSD Input Validation Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD. An attacker could exploit this vulnerability to disclose kernel data used in system calls...

The vulnerability of the do_get_mempolicy() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dogetmempolicy function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to trigger a service failure through specially crafted system calls...

Security Bulletin: IBM API Connect is affected by multiple GSKit and OpenSSL vulnerabilities

Summary IBM API Connect has addressed multiple vulnerabilities in GSKit and OpenSSL. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit this vulnerability to...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. A use-after-free UAF vulnerability in dogetmempolicy function in mm/mempolicy.c allows an attacker to cause a denial of service condition via malicious system calls...