CVE-2017-17293: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-15337: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30,...

CVE-2017-15336: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20,...

CVE-2017-15353: Out-of-bounds Read

Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00,...

CVE-2017-15354: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-15355: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-17294: NULL Pointer Dereference

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Huawei's Multiple Product Cross-Border Write Vulnerabilities

Huawei AR120-S and others are router products from Huawei China. A security vulnerability exists in several Huawei products, which stems from a program that fails to properly validate user-submitted data. A remote attacker can exploit the vulnerability by sending an abnormal OSPF message to cause...

Security Advisory - Two Buffer Overflow Vulnerabilities in Some Huawei Products

There is an out-of-bound write vulnerability in some Huawei products. Due to insufficient input validation, a remote, unauthenticated attacker may craft encryption key to the affected products. Successful exploit may cause buffer overflow, services abnormal. Vulnerability ID: HWPSIRT-2017-11058...

The vulnerability in the software for converting images on the Debian GNU/Linux operating system, related to pointer arithmetic errors, allows a hacker to cause an unexpected termination of the application.

The vulnerability of the software for converting image formats in the Debian GNU/Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, working remotely, to cause the application to terminate abnormally using a specially crafted cue fi...

PT-2018-11598 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.15 is not specified, however, the issue is in versions through 4.14. Description: An issue in the Linux kernel can cause a denial of service due to out-of-bounds memory access and BUG when mounting a crafte...

CVE-2017-8189

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...

CVE-2017-8189

CVE-2017-8189 is a path traversal vulnerability in Huawei FusionSphere OpenStack, affecting FusionSphere OpenStack V100R006C00SPC102 (NFV). Root cause: insufficient path validation. A high-privilege attacker could traverse paths and overwrite/cover files, leading to service disruption (as per Hua...

CVE-2017-8189

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...

CVE-2017-8189: Improper Limitation of a Pathname to a Restricted Directory

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...

The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, arises due to the execution of an operation beyond the buffer boundaries in memory reading beyond the memory boundaries when calling EncodeFileName::Decode. Exploiting this...

10 Tips for Effective Threat Hunting

Editor’s Note: The text appears in the free eBook: “Threat Hunting for Dummies.” Consider the fact that attackers don’t think of their success as optional. Given that, effectiveness and success of a threat hunting program are critical. Organizations that start a threat hunting program have succes...

The vulnerability of the mod_auth_digest module in the Apache HTTP Server allows a hacker to cause the server to terminate abnormally.

The vulnerability of the modauthdigest module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause the server to terminate abnormally. Each instance of the server will continue to terminate abnormally eve...

The vulnerability of the ReadICONImage function in the console-based image editing tool ImageMagick allows a hacker to cause an unexpected termination of the application.

The vulnerability of the ReadICONImage function coders\icon.c in the console-based graphic editor ImageMagick is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally lead to a memory exhaustion conditio...

DBShield - Database Firewall Written In Go

Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For example, this is how web server normally interacts with database server: By adding DBShield in front of database server we can protect it against abnormal queries. To dete...