openSUSE Security Update : php7 (openSUSE-2018-892)

This update for php7 fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-14851: Fixed an out-of-bound read in exifprocessIFDinMAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. bsc1103659 -...

[SECURITY] [DLA 1470-1] confuse security update

Package : confuse Version : 2.7-5+deb8u1 CVE ID : CVE-2018-14447 Debian Bug : 904159 An out of bound read was discoverd in libConfuse, a configuration file parser library. CVE-2018-14447 An out of bound read in trimwhitespace, fixed thanks to Sebastian Roland [email protected]. For Debian 8...

SUSE-SU-2018:2333-1 Security update for php7

This update for php7 fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-14851: Fixed an out-of-bound read in exifprocessIFDinMAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. bsc1103659 -...

PT-2018-1962

Name of the Vulnerable Software and Affected Versions Android version 9 Description The issue is related to a missing bounds check in the CAacDecoder Init function of aacdecoder.cpp, which could lead to an out-of-bound write. This might allow remote code execution in the media server without...

FreeBSD : Flash Player -- multiple vulnerabilities (98b603c8-9ff3-11e8-ad63-6451062f0f7a)

Adobe reports : - This update resolves out-of-bounds read vulnerabilities that could lead to information disclosure CVE-2018-12824, CVE-2018-12826, CVE-2018-12827. - This update resolves a security bypass vulnerability that could lead to security mitigation bypass CVE-2018-12825. - This update...

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB3213636)

This host is missing an important security update according to Microsoft KB3213636 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Word Viewer Information Disclosure Vulnerability (KB4092433)

This host is missing an important security update according to Microsoft KB4092433 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB4022198)

This host is missing an important security update according to Microsoft KB4022198 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2013 Service Pack 1 Information Disclosure Vulnerability (KB4032239)

This host is missing an important security update according to Microsoft KB4032239 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2018-2457

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f Description The issue is related to heap out-of-bound write vulnerabilities in the VNC client code, which can result in remote code execution. It is also described as a...

Security Updates for Microsoft Office Products (August 2018)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of...

PT-2018-2456

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit 502821828ed00b4a2c4bef90683d0fd88ce495de Description The issue is related to a heap out-of-bound write in the server code of the file transfer extension, which can result in remote code execution. It is also...

PT-2018-2458

Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d Description The issue is related to a heap out-of-bound write vulnerability inside a structure in the VNC client code, which can result in remote code execution. It is al...

Security Updates for Microsoft Office Viewer Products / Office Compatibility Products (August 2018)

The Microsoft Office Viewer / Office Compatibility Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker w...

Out-Of-Bounds Read

libvirt.so is vulnerable to an out-of-bound read. The vulnerability exists in qemuDomainGetBlockIoTune function in qemu/qemudriver.c file because the live definition is used to look up the disk index while the persistant one is indexed which allows an attacker to cause a denial of service conditi...

PT-2018-1623

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to a possible out-of-bound read in the avrc msg cback function of avrc api.cc. This could lead to remote information disclosure over Bluetooth with no additional execution...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the LogL16Decode function in tifluv.c to cause an out-of-bound write that can crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file encoded with LogL compression to the application, causing an out-of-bound read that can cause the application to crash...

CVE-2018-10882

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image...

CVE-2018-10882

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image...