QEMU: usb: out-of-bounds r/w access issue

ISSUE DESCRIPTION An out-of-bounds read/write access issue was found in the USB emulator of the QEMU. It occurs while processing USB packets from a guest, when 'USBDevice-setuplen' exceeds the USBDevice-databuf4096, in dotokenin,out routines. IMPACT A guest user may use this flaw to crash the QEM...

UBUNTU-CVE-2020-9915

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing...

SUSE-SU-2020:1767-1 Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92114 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437. - CVE-2019-15666: Fixed an out of bounds read xfrmpolicyunlink,...

CVE-2019-10626

Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2017-18915

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access...

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

Authentication flaw

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to modify protected parts of the file system...

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

CVE-2020-9851

CVE-2020-9851 relates to an access issue in macOS components that could allow a malicious application to modify protected parts of the file system. Apple’s advisory HT211170 states this vulnerability is fixed in macOS Catalina 10.15.5. The issue is described as an access restriction problem addre...

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

CVE-2020-12888

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space...

DEBIAN-CVE-2020-11865

libEMF aka ECMA-234 Metafile Library through 1.0.11 allows out-of-bounds memory access...

The vulnerability of the WritePDBImage function in the GraphicsMagick graphics editor, related to writing beyond buffer boundaries, allows an attacker to access confidential information or cause a service failure.

The vulnerability of the WritePDBImage function in the GraphicsMagick graphics editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

CVE-2020-11649

CVE-2020-11649 affects GitLab CE/EE 8.15 through 12.9.2, where members of a group could retain access after the group is deleted. This is described as a design/logic flaw in multiple sources (e.g., BIT-GITLAB-2020-11649, CNVD-2020-25737, OSV: CVE-2020-11649). Impact is unauthorized access persist...

Design/Logic Flaw

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclose a photo without needing permission to access photos...

CVE-2020-3916

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclose a photo without needing permission to access photos...

CVE-2020-3916

Apple fixed CVE-2020-3916 in watchOS 6.2, iOS 13.4 and iPadOS 13.4 by tightening sandbox restrictions. The vulnerability could let an attacker use an alternate app icon to disclose a photo without requiring photo permissions, via the Icons component on Apple Watch/iOS/iPadOS. Reported as an acces...

OPENSUSE-SU-2020:0416-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2019-12921: Fixed an issue where text filename components potentially coulf have allowed reading of arbitrary files via TranslateTextEx boo1167208. - CVE-2020-10938: Fixed an integer overflow and resultant heap-based buffer overflow...

About the security content of watchOS 6.2

About the security content of watchOS 6.2 This document describes the security content of watchOS 6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

SUSE-SU-2020:0660-1 Security update for openstack-manila

This update for openstack-manila fixes the following issues: - CVE-2020-9543: Fixed an issue where other project users to view, update, delete, or share resources that do not belong to them, due to a context-free lookup of a UUID bsc1165643...