SUSE-SU-2020:1511-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. - CVE-2020-2755: Fixed an...

Debian DLA-2219-1 : feh security update

Tobias Stoeckmann discovered that it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. For Debian 8 'Jessie', this problem has been fixed in version 2.12-1+deb8u1. We recommend that you upgrade your feh packages. NOTE: Tenable Network...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-30221)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Network Stack & Connectivity in...

[SECURITY] [DLA 2219-1] feh security update

Package : feh Version : 2.12-1+deb8u1 CVE ID : CVE-2017-7875 Tobias Stoeckmann discovered that it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. For Debian 8 "Jessie", this problem has been fixed in version 2.12-1+deb8u1. We recomme...

SANE Backends Buffer Overflow Vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A buffer error vulnerability exists in SANE Backends. The vulnerability arises from a networked system or product performing operations o...

OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...

OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-28990)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

AppNeta Tcpreplay Heap Buffer Overflow Vulnerability

AppNeta Tcpreplay is the United States AppNeta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. A buffer overflow vulnerability exists in the tcprewrite binary in AppNeta Tcpreplay 4.3.2 and earlier versions, which stems from the...

Kartris 1.6 Arbitrary File Upload

Exploit Title: Kartris 1.6 - Arbitrary File Upload Dork: N/A Date: 2020-05-08 Exploit Author: Nhat Ha - Sun CSR Vendor Homepage: https://www.cactusoft.com/ Software Link: https://www.kartris.com/ Version: 1.6 Category: Webapps Tested on: WiN10x64/KaLiLinuXx64 CVE: N/A POC:...

Out-of-bound Reads

FreeRDP is vulnerable to Out-of-bound Reads. The vulnerability exists because it does not properly handle the updatereadiconinfo data boundary checks, leading to a leakage of amount of client memory 32bit unsigned - 4GB to an intermediate buffer and crashing an application or unauthorized storage...

Out-of-Bound Reads

libfreerdp.so is vulnerable to Out-of-Bound Reads. The vulnerability exists because it does not properly perform the data boundary check of updatereadbitmapdata, leaking the memory to an image buffer reflecting the result on screen as colour...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-29362)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

The vulnerability of the `sctp_load_addresses_from_init` function in the implementation of the USRCTP protocol, which supports multiple addresses, relates to reading beyond the buffer boundaries in memory. This allows a malicious actor to cause a service failure.

The vulnerability of the sctploadaddressesfrominit function in the implementation of the USCTCP protocol, which supports multiple addresses, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46349)

The NETGEAR R6400, among others, is a wireless router from NETGEAR. A buffer error vulnerability exists in multiple NETGEAR products that stems from incorrect boundary checks. A remote attacker could exploit this vulnerability with a specially crafted request to execute arbitrary code on the syst...

AASync Buffer Overflow Vulnerability

AASync is a file backup, folder synchronization utility. A buffer overflow vulnerability exists in AASync version 2.2.1.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28248)

NETGEAR D7800 and others are products of NETGEAR USA.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR3700 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products.The vulnerability originates when a network system or product perfor...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28242)

The NETGEAR R9000, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28247)

NETGEAR D7800 and others are products of NETGEAR USA.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR3700 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products.The vulnerability originates when a network system or product perfor...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46569)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...