12369 matches found
Debian DLA-1343-1 : ming security update
Multiple vulnerabilities have been discovered in Ming : CVE-2018-6358 Heap-based buffer overflow vulnerability in the printDefineFont2 function util/listfdb.c. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted swf file. CVE-2018-7867 Heap-based buffer...
tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6print...
tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...
Simple DirectMedia Layer SDL2_Image load_xcf_tile_rle Information Disclosure Vulnerability
Summary An exploitable information vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image to trigger this...
tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser
The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint...
[SECURITY] [DLA 1343-1] ming security update
Package : ming Version : 0.4.4-1.1+deb7u8 CVE ID : CVE-2018-6358 CVE-2018-7867 CVE-2018-7868 CVE-2018-7870 CVE-2018-7871 CVE-2018-7872 CVE-2018-7875 CVE-2018-9165 Multiple vulnerabilities have been discovered in Ming: CVE-2018-6358 Heap-based buffer overflow vulnerability in the printDefineFont2...
CVE-2017-15837
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211PKTPATOFFSET is not defined which can lead to a buffer over-read in nlagetu32...
Code injection
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211PKTPATOFFSET is not defined which can lead to a buffer over-read in nlagetu32...
CVE-2017-15853
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, pttsocksendmsgtoapp is invoked without validating the packet length. If the packet length is invalid,...
CVE-2017-15853
The CVE-2017-15853 issue affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds on CAF kernels prior to the 2018-04-05 patch level. Root cause: during PTT processing, ptt_sock_send_msg_to_app() may be called without validating packet length, enabling a buffer over-read. Impa...
CVE-2017-15837
CVE-2017-15837 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds in CAF-derived Linux kernels prior to 2018-04-05. The issue is a missing NL80211_PKTPAT_OFFSET policy, which can cause a buffer over-read in nla_get_u32(). Impact is a partial confidentiality risk with no ...
CVE-2017-15837
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211PKTPATOFFSET is not defined which can lead to a buffer over-read in nlagetu32...
CVE-2017-15853
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, pttsocksendmsgtoapp is invoked without validating the packet length. If the packet length is invalid,...
Security fix for the ALT Linux 8 package curl version 7.59.0-alt1
March 31, 2018 Anton Farygin 7.59.0-alt1 - new version - fixes: CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write CVE-2018-1000121 LDAP NULL pointer dereference CVE-2018-1000122 RTSP RTP buffer over-read...
Security update for memcached (important)
This update for memcached fixes the following issues: - CVE-2017-9951: Fixed heap-based buffer over-read in tryreadcommand function which allowed remote attackers to cause a denial of service attack bsc1056865. This update was imported from the SUSE:SLE-12:Update update project...
Heap overflow
In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...
