841 matches found
SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2780-1)
This update for binutils fixes the following issues : binutils was updated to current 2.32 branch jscECO-368. Includes following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory access exists in...
SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2779-1)
This update for binutils fixes the following issues : binutils was updated to current 2.32 branch jscECO-368. Includes following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory access exists in...
cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in SEED_set_key
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5706649829900288 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...
SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2019:2650-1)
This update for binutils fixes the following issues : binutils was updated to current 2.32 branch @7b468db3 jscECO-368 : Includes the following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory...
Linux/x86 - NOT + XOR-N + Random Encoded /bin/sh Shellcode (132 bytes)
Date: 4th October 2019 Shellcode Author: @bolonobolo - https://bolonobolo.github.io Tested on: Linux x86 execve.asm global start section .text start: ; put NULL bytes in the stack xor eax, eax push eax //bin/sh push 0x68732f6e push 0x69622f2f mov ebx, esp ; push NULL in the EDX position push eax...
The vulnerability of the libnasm.a component of the Netwide Assembler (NASM) assembly language allows a hacker to trigger a service failure.
The vulnerability of the libnasm.a component of the Netwide Assembler NASM compiler is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Null pointer dereference
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
UBUNTU-CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
CVE-2019-14248
Summary: CVE-2019-14248 affects Netwide Assembler (NASM) 2.14.x in the libnasm.a library. The flaw is a NULL pointer dereference in asm/pragma.c (functions: process_pragma, search_pragma_list, nasm_set_limit) when the string "%pragma limit" is mishandled. Impact (per provided metrics): CVSSv2 ind...
CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
Netwide Assembler Code Issue Vulnerability
Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A code issue vulnerability exists in Netwide Assembler. The vulnerability stems from an improperly designed or implemented code development process for a networked system or...
CVE-2019-14248: NULL Pointer Dereference
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
PT-2019-2955 · Netwide +2 · Netwide Assembler +2
Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions 2.14.xx Description: The issue is related to a NULL pointer dereference in the libnasm.a component of the Netwide Assembler NASM. This can be triggered when the "%pragma limit" is mishandled, specifically in th...
NASM: Multiple vulnerabilities
Background NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats ELF, a.out, COFF, etc, and has its own disassembler. Description Multiple vulnerabilities have been...
openssl security update
1.0.2k-16.0.1.el76.1 - Bump release for rebuild. 1.0.2k-16.1 - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on...
CVE-2019-8343
In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...
CVE-2019-8343
In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...
UBUNTU-CVE-2019-8343
In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c...