CVE-2019-14874

CVE-2019-14874 affects the newlib libc library: in the function __i2b (newlib/libc/stdlib/mprec.c), all versions prior to 3.3.0 allocate a big integer with Balloc but do not verify allocation success, causing a null pointer dereference when accessing x[0] on failure. This is a memory allocation h...

CVE-2019-14873

In the multadd function of the newlib libc library, prior to versions 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory...

virglrenderer vrend_renderer.c resource management error vulnerability

virglrenderer is a VirGL virtual OpenGL renderer. virglrenderer 0.8.1 and earlier versions have a resource management error vulnerability in the vrendrenderer.c file. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or...

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

DEBIAN-CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

CVE-2020-8003

CVE-2020-8003 applies to virglrenderer, specifically a double-free in vrend_renderer.c that can cause a denial of service when a texture allocation fails. The root cause is that vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Public documentation in the connected...

CVE-2020-8003

A double-free vulnerability in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrendrendererresourceallocatedtexture is not an appropriate place for a free...

Huawei EulerOS: Security Advisory for libwmf (EulerOS-SA-2019-2623)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for http-parser (EulerOS-SA-2019-2238)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : openslp (EulerOS-SA-2019-2641)

According to the versions of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via ...

EulerOS 2.0 SP5 : libwmf (EulerOS-SA-2019-2537)

According to the version of the libwmf packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service application crash via a crafted wmf file,...

EulerOS 2.0 SP2 : libwmf (EulerOS-SA-2019-2492)

According to the version of the libwmf packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service application crash via a crafted wmf file,...

qt5-qtbase security and bug fix update

qt5-qtbase 5.11-1-7 - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg Resolves: bz1692970 - Fix QImage allocaion failure Resolve: bz1667860 - Fix double free in QXmlStreamReader Resolve: bz1667858 - Fix segmentation fault on malformed BMP file Resolve: bz1667859 5.11.1-6 - Create a...

CVE-2018-12121

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers almost 80 KB per connection, and carefully timed completion of the headers, it is possible to cause the HTTP...

nodejs: Denial of Service with large HTTP headers

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers almost 80 KB per connection, and carefully timed completion of the headers, it is possible to cause the HTTP...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS

A flaw was found in the Linux kernel, prior to version 5.0.7, in drivers/scsi/megaraid/megaraidsasbase.c, where a NULL pointer dereference can occur when megasascreateframepool fails in megasasalloccmds. An attacker can crash the system if they were able to load the megaraidsas kernel module and...

Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...