Linux kernel null pointer dereference vulnerability (CNVD-2019-31655)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c in versions of Linux kernel prior to 5.0.11. The...

Linux kernel memory leak vulnerability (CNVD-2019-31647)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel versions prior to 5.0.6 have a memory leak vulnerability in net/netlink/genetlink.c when idralloc of genlregisterfamily fails. No details of the...

Linux kernel null pointer dereference vulnerability (CNVD-2019-31656)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in the cd data structure in versions of Linux kernel prior to 5.0.9 when allocdisk in drivers/block/paride/pf.c fails. ...

DEBIAN-CVE-2019-15924

An issue was discovered in the Linux kernel before 5.0.11. fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c has a NULL pointer dereference because there is no -ENOMEM upon an allocworkqueue failure...

CVE-2019-15923

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if allocdisk fails in drivers/block/paride/pf.c...

UBUNTU-CVE-2019-15922

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if allocdisk fails in drivers/block/paride/pf.c...

UBUNTU-CVE-2019-15924

An issue was discovered in the Linux kernel before 5.0.11. fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c has a NULL pointer dereference because there is no -ENOMEM upon an allocworkqueue failure...

UBUNTU-CVE-2019-15923

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if allocdisk fails in drivers/block/paride/pf.c...

Important: Red Hat Security Advisory: procps-ng security update

An update for procps-ng is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

PT-2019-14470

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.6 Description A memory leak issue was discovered in the Linux kernel. This issue occurs when idr alloc fails in genl register family in net/netlink/genlink.c. Recommendations For versions prior to 5.0.6, upda...

OPENSUSE-SU-2019:0346-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk to version jdk8u201 icedtea 3.11.0 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl bsc1122293. - CVE-2018-11212: Fixed an issue in allocsarray function in jmemmgr.c bsc1122299. Complete list of...

SUSE-SU-2019:0604-1 Security update for java-1_7_1-ibm

This update for java-171-ibm to version 7.1.4.40 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl bsc1122293. - CVE-2018-11212: Fixed an issue in allocsarray function in jmemmgr.c bsc1122299. More information:...

PT-2019-2115

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a double free vulnerability in the binder alloc free page function of binder alloc.c in the Android kernel. This could lead to a local escalation of privilege in the kernel without needing...

Denial Of Service

gc is vulnerable to denial of service DoS. It is possible due to lack of parameter sanitization, allowing the attacker to pass malicious input to the alloc and calloc routines...

CVE-2018-11987

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic...

CVE-2018-11987

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic...

CVE-2018-11987: Double Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic...

PT-2018-2843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the Linux kernel's implementation of the mpi alloc function in the digsig/digsig verif.ko module. This can lead to a denial of servi...

nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters

It was found that the Buffer.fill and Buffer.alloc function may hang. An attacker able to control the input of these function could use this flaw to cause a denial of service...

EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1274)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec.CVE-2018-1124 - procps-ng, procps: incorrect integ...