5966 matches found
CVE-2017-13307
CVE-2017-13307 is an elevation of privilege in the Upstream kernel PCI sysfs exposed on Android devices. Affected: Android kernel components implementing pci sysfs. Root cause: unspecified in the provided details, described as a privilege-escalation vulnerability. Impact: elevation of privileges ...
CVE-2017-13305
CVE-2017-13305 : A vulnerability described as an information disclosure in the Upstream Linux kernel encrypted-keys, with affected product scope as Android kernels. The Initial CVE text notes Android kernel as the impacted component and Android ID A-70526974, describing a local information disclo...
CVE-2017-13306
CVE-2017-13306 is an elevation-of-privilege vulnerability in the Upstream kernel mnh driver affecting Android kernel components. The issue is categorized as EoP with a moderate severity in Android security bulletins, implying a privilege escalation path within the kernel module rather than user-s...
CVE-2017-13305
A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974...
OracleVM 3.4 : xen (OVMSA-2018-0028) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=bf523bc61677448cb7bb79980d6969896d005bd5 - BUILDINFO: QEMU upstream...
UBUNTU-CVE-2017-13305
A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974...
CVE-2017-13305
A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974...
imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::identify
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5922589626073088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
graphicsmagick/coder_XCF_fuzzer: Use-of-uninitialized-value in AlphaCompositePixel
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5383447750115328 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXCFfuzzer Fuzz target binary: coderXCFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_PALM_fuzzer: Use-of-uninitialized-value in TransparentImageCallBack
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5134611630784512 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPALMfuzzer Fuzz target binary: coderPALMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
libreoffice/ww8fuzzer: Heap-use-after-free in SwIndex::Remove
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4996602998554624 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...
openSUSE Security Update : links (openSUSE-2018-330)
This update for links to version 2.15 fixes the following issues : - CVE-2017-11114: Buffer over-read vulnerability in case of corrupted UTF-8 data boo1051448 This update also contains a number of upstream improvements : - Rewrite google docs URLs to the download link, so that the file can be...
imagemagick/encoder_jpg_fuzzer: Use-of-uninitialized-value in encode_mcu_gather
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4842845987930112 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpgfuzzer Fuzz target binary: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
ots/ots-fuzzer: Crash in ots::Buffer::ReadU16
Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=4904400788127744 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x627000385430 Crash...
imagemagick/encoder_mvg_fuzzer: Crash in TracePoint
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717396758200320 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
net-snmp/agentx_parse_fuzzer: Stack-buffer-overflow in agentx_parse_string
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed report: https://oss-fuzz.com/testcase?key=5727267801006080 Project: net-snmp Fuzzer: libFuzzernet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: libfuzzerasannet-snmp Platform I...
Debian DSA-4157-1 : openssl - security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2017-3738 David Benjamin of Google reported an overflow bug in the AVX2 Montgomery multiplication procedure used in...
Revert libxml2 behavior in Nokogiri gem that could cause XSS
MRI Behavior in libxml2 has been reverted which caused CVE-2018-8048 loofah gem, CVE-2018-3740 sanitize gem, and CVE-2018-3741 rails-html-sanitizer gem. The commit in question is here: https://github.com/GNOME/libxml2/commit/960f0e2 and more information is available about this commit and its impa...
librawspeed/Cr2DecompressorFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5174454507274240 Project: librawspeed Fuzzer: libFuzzerlibrawspeedCr2DecompressorFuzzer Fuzz target binary: Cr2DecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash...