CVE-2018-14775

tssalloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service system crash due to incorrect I/O port access control on the i386 architecture...

PT-2018-12714

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.2 through 6.3 Description The issue is related to incorrect I/O port access control on the i386 architecture, which can cause a Local Denial of Service system crash due to the tss alloc function in sys/arch/i386/i386/gdt.c...

PT-2019-14868

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17 Description The issue is related to the hns roce alloc ucontext function in the Linux kernel, which does not properly initialize the resp data structure. This could potentially allow attackers to obtain...

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

RHEL 7 : procps-ng (RHSA-2018:1700)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1700 advisory. - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec CVE-2018-1124 - procps-ng, procps: incorrect integer size in...

DEBIAN-CVE-2018-1126

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124...

CVE-2018-1126

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124...

CVE-2018-1126

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124...

CVE-2018-1126: Integer Overflow or Wraparound

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124...

UBUNTU-CVE-2018-1126

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc. leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124...

PT-2018-2416

Name of the Vulnerable Software and Affected Versions libjpeg versions 9a through 9d Description The issue allows remote attackers to cause a denial of service via a crafted file, resulting in a divide-by-zero error in the alloc sarray function in jmemmgr.c. This can lead to the application...

PT-2018-2609

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 version 0.11.0 libjpeg affected versions not specified Description The issue is related to insufficient input validation in the OpenJ9 JIT compiler component of the Eclipse OpenJ9 virtual machine. This can be exploited by a remo...

The vulnerability of the rds_message_alloc_sgs() function in the Linux operating system allows a hacker to perform write operations beyond the buffer boundaries in memory.

The vulnerability of the rdsmessageallocsgs function in the Linux operating system is related to insufficient checks on the data used by the direct memory access mechanism. Exploiting this vulnerability could allow an attacker to write data beyond the buffer boundaries in memory...

Linux Kernel rds_message_alloc_sgs() Local Denial of Service Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'rdsmessageallocsgs' parameter in Linux kernel 4.14.13 and earlier, which stems from a program's failure to...

PT-2018-1069

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.2 Description The issue is related to the rds message alloc sgs function in the Linux kernel, which does not properly validate a value used during DMA page allocation. This can lead to a heap-based out-of-bound...

DEBIAN-CVE-2017-11695

Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

PT-2017-12184

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description A heap-based buffer overflow issue exists in the alloc segs function in lib/dbm/src/hash.c, which can be exploited by context-dependent attackers using a crafted...

PT-2017-12924

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue is related to an integer overflow in the image alloc function, located in bpgenc.c, which leads to an invalid malloc and a NULL pointer dereference. Recommendations For libbpg version 0.9.7, consider...

CVE-2017-5114

Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file...

Memory corruption

Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file...