CVE-2018-7869: Missing Release of Resource after Effective Lifetime

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack...

CVE-2018-7870: NULL Pointer Dereference

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7877: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7874: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7868: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

PT-2018-18295

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getName function of util/decompile.c for CONSTANT8 data. This can be triggered by a crafted input, potentially leading to a denial of service...

PT-2018-18300

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A heap-based buffer overflow exists in the getString function of util/decompile.c for INTEGER data. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations: For libmi...

PT-2018-18297

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the getString function in util/decompile.c, specifically for CONSTANT16 data. This issue leads to a segmentation fault, causing the application to crash and...

PT-2018-18301

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the strlenext function within util/decompile.c of libming, leading to a segmentation fault, application crash, and denial of service. Recommendations: For...

PT-2018-18304

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A heap-based buffer overflow exists in the getString function of util/decompile.c for DOUBLE data. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations: For libmin...

PT-2018-18298

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getName function of util/decompile.c, specifically for CONSTANT16 data. This can be triggered by a crafted input, potentially leading to a denial ...

PT-2018-18293

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A NULL pointer dereference was discovered in newVar3 in util/decompile.c, causing a segmentation fault and application crash, which leads to denial of service. Recommendations: For libming version 0.4.8,...

CVE-2018-7866: NULL Pointer Dereference

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

GLSA-201803-02 : util-linux: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-02 util-linux: User-assisted execution of arbitrary code It was discovered that the umount bash-completion as provided by util-linux does not escap mount point paths. Impact : An attacker controlling a volume label could...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

DEBIAN-CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

UBUNTU-CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

util-linux: User-assisted execution of arbitrary code

Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description It was discovered that the umount bash-completion as provided by util-linux does not escap mount point paths. Impact An attacker controlling a volume label...