CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8881: Out-of-bounds Read

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8883: Out-of-bounds Read

Netwide Assembler NASM 2.13.02rc2 has a buffer over-read in the parseline function in asm/parser.c via uncontrolled access to nasmregflags...

CVE-2018-8882: Improper Restriction of Operations within the Bounds of a Memory Buffer

Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...

PT-2018-18687

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a heap-based buffer over-read in the tokenize function located in asm/preproc.c, which occurs due to an unterminated string. Recommendations For Netwide Assembler NA...

PT-2018-18689

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a buffer over-read in the parse line function, located in asm/parser.c. This occurs due to uncontrolled access to nasm reg flags. Recommendations For Netwide Assembl...

PT-2018-18688

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a stack-based buffer under-read in the ieee shr function, located in asm/float.c, which occurs when a large shift value is provided. Recommendations For version...

PT-2018-18633

Name of the Vulnerable Software and Affected Versions radare2 version 2.4.0 Description The issue is a heap-based buffer over-read in the r asm disassemble function, which can be exploited by remote attackers to cause a denial of service. This can be achieved through a crafted dex file...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2017-6154

CVE-2017-6154 affects F5 BIG-IP ASM; specifically the bd process may core dump memory when processing undisclosed data on systems with 48+ CPU cores. Vulnerable: BIG-IP ASM (bd) across versions 13.0.0, 12.1.0–12.1.3, and 11.6.1–11.6.2. Impact: core file generation, traffic processing interruption...

CVE-2017-6154: Improper Input Validation

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

PT-2018-8301

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue occurs on F5 BIG-IP systems when the BIG-IP ASM bd daemon processes certain types of data on systems with 48 or...

PT-2018-14869

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM versions prior to 2.13.02 Description The issue is related to a use-after-free in the detoken function at asm/preproc.c. Recommendations For versions prior to 2.13.02, update to version 2.13.02 or later to resolve the...

macOS - 'process_policy' Stack Leak Through Uninitialized Field

/ The syscall processpolicyscope=PROCPOLICYSCOPEPROCESS, action=PROCPOLICYACTIONGET, policy=PROCPOLICYRESOURCEUSAGE, policysubtype=PROCPOLICYRUSAGECPU, attrp=, targetpid=0, targetthreadid= causes 4 bytes of uninitialized kernel stack memory to be written to userspace. The call graph looks as...

CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

CVE-2017-17814

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in dodirective in asm/preproc.c that will cause a remote denial of service attack...

CVE-2017-17812

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...

Code injection

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners primary and/or secondary IP may...

Design/Logic Flaw

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...