PT-2016-3285

Name of the Vulnerable Software and Affected Versions libarchive version 3.2.2 Description The issue is related to the archive wstring append from mbs function in archive string.c, which can cause a denial of service due to a NULL pointer dereference and application crash when processing a crafte...

CVE-2016-2996

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...

CVE-2016-2996

CVE-2016-2996 concerns IBM Security Privileged Identity Manager 2.0, specifically the Virtual Appliance. An authenticated remote user could modify the system by appending lines to arbitrary files due to an input validation error. The issue is documented in IBM Security Privileged Identity Manager...

CVE-2016-2996: Improper Input Validation

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...

PT-2016-5317

Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager version 2.0 before 2.0.2 FP8 Description The issue allows remote authenticated users to append to arbitrary files. This can be achieved via unspecified vectors when the Virtual Appliance is used...

Remote Code Execution Vulnerability in Memcached Append/Prepend

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Append/Prepend. processbinappendprepend function handles multiple commands of the Memcached binary protocol c...

Memcached Server Append/Prepend remote code execution vulnerability

DETAILS Memcached is a high performance object caching server intended for speeding up dynamic web applications and is used by some of the most popular Internet websites. It has two versions of the protocol for storing and retrieving arbitrary data, an ASCII based one and a binary one. The binary...

Memcached Server Append/Prepend Remote Code Execution Vulnerability

Summary An integer overflow in the processbinappendprepend function which is responsible for processing multiple commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution. Tested Versions Memcached 1.4.31 Product URLs https://memcached.org/ CVSSv...

CVE-2016-3367: Improper Restriction of Operations within the Bounds of a Memory Buffer

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

PHP 7.0 - 'AppendIterator::append' Local Denial of Service

Exploit for php platform in category dos / poc append$tmp; // Crash ? 0day.today 2017-12-31...

Easy FTP Server APPE Remote Code Execution Vulnerability

Easy FTP Server is a free green software that does not require installation and is prohibited for commercial use Supports multiple users, multiple permissions, multiple directories, supports web access, supports Windows system service mode. Easy FTP Server has a security vulnerability. Due to the...

The vulnerability of the Dovecot mail server, which allows a remote attacker to cause a service failure

The Dovecot software contains a bug in the implementation of the IMAP protocol /imap/cmd-append.c. A malicious actor can cause a service failure by using a specially crafted network packet with an incorrectly set “APPEND” parameter, thereby causing the software to enter an infinite loop...

PT-2016-4060 · Libarchive +2 · Libarchive +2

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.2.0 Description: The issue allows remote attackers to cause a denial of service crash via crafted cab files. This is related to "overlapping memcpy" in the archive string append function in archive string.c...

PT-2016-6031

Name of the Vulnerable Software and Affected Versions Libksba versions prior to 1.3.4 Description The issue is caused by an off-by-one error in the append utf8 value function within the DN decoder dn.c in Libksba. This error allows remote attackers to cause a denial of service out-of-bounds read...

kernel security and bug fix update

3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...

UBUNTU-CVE-2016-1634

Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted...

UBUNTU-CVE-2016-2569

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service assertion failure and daemon exit via a long string, as demonstrated by a crafted HTTP Vary header...

CVE-2010-2537

The btrfsioctlclone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a 1 BTRFSIOCCLONE or 2 BTRFSIOCCLONERANGE ioctl call that specifies this file as a donor...

The vulnerability of the Thunderbird email client, which allows a hacker to trigger a service failure

The vulnerability of the nsXMLHttpRequest::AppendToResponseText method in the Thunderbird email client is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Memory corruption

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors...