CVE-2018-11851

CVE-2018-11851 relates to a buffer-length calculation input validation flaw in CAF Qualcomm WLAN driver components, causing a possible out-of-bounds write to kernel stack. The vulnerability is documented as a local, impactful issue with high severity (NVD CVSS v2/3 vectors indicate LOCAL access, ...

CVE-2018-11851

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack...

PT-2018-10464

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue arises when the WLAN FW fails to correctly fill the vdev id in stats events,...

EulerOS Virtualization 2.5.0 : dhcp (EulerOS-SA-2018-1250)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could...

PT-2018-10852

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a lack of check on input received to calculate the buffer length...

Apache Syncope Remote Code Execution Vulnerability (CNVD-2018-18784)

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. Apache Syncope uses XSLT to export report data to various formats...

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

Cross site scripting

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

UBUNTU-CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

CVE-2018-14632

OpenShift Container Platform before 3.7 is vulnerable to an out-of-bounds write when patching an object via oc patch, which could cause a denial of service to the master API service. Root cause: JSON Patch out-of-bounds write. Remediation/fix version is not specified in the provided documents; mo...

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

Microsoft Windows Explorer Out-of-Bound Read - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1 Build 7601 CVE: N/A buffer = '' buffe...

Microsoft Windows Explorer Out-Of-Bounds Read Denial Of Service

Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1 Build 7601 CVE: N/A buffer = '' buffer +=...

Microsoft Windows Explorer Out-of-Bound Read - Denial of Service (PoC)

Microsoft Windows Explorer Out-of-Bound Read - Denial of Service PoC Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1...

Microsoft Windows Explorer Out-of-Bound Read - Denial of Service (PoC)

Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1 Build 7601 CVE: N/A buffer = '' buffer +=...

Security update for libgit2 (important)

This update for libgit2 to version 0.26.5 fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10887: Fixed an integer overflow which in turn leads to an out of bound read, allowing to read the base object, which could be exploited by an attacker to cause...

Debian: Security Advisory (DLA-1470-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1470-1 : confuse security update

An out of bound read was discoverd in libConfuse, a configuration file parser library. CVE-2018-14447 An out of bound read in trimwhitespace, fixed thanks to Sebastian Roland . For Debian 8 'Jessie', this problem has been fixed in version 2.7-5+deb8u1. We recommend that you upgrade your confuse...