CVE-2018-6542

In ZZIPlib 0.13.67, there is a bus error when handling a disk64trailer seek value caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c...

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktrailer zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2018-6540

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzipdiskfindfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

Design/Logic Flaw

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

DEBIAN-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

openSUSE Security Update : systemd (openSUSE-2018-117)

This update for systemd fixes several issues. This security issue was fixed : - CVE-2018-1049: Prevent race that can lead to DoS when using automounts bsc1076308. These non-security issues were fixed : - core: don't choke if a unit another unit triggers vanishes during reload - delta: don't ignor...

UBUNTU-CVE-2017-16914

The "stubsendretsubmit" function drivers/usb/usbip/stubtx.c in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service NULL pointer dereference via a specially crafted USB over IP packet...

IBM Integration Bus Session Hijacking Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A session hijacking vulnerability...

Session fixation

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-1693

IBM Integration Bus versions 9.0.0.0–9.0.0.8 and 10.0.0.0–10.0.0.9 are affected by CVE-2017-1693, which allows session hijacking if an attacker has a valid session ID, during a short window before timeout. The IBM Security Bulletin confirms remediation via APAR IT21158, with fixes available in 9....

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

The vulnerability of the parse_hid_report_descriptor function (drivers/input/tablet/gtco.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

The vulnerability of the dvb_frontend_free function (drivers/media/dvb-core/dvb_frontend.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the dvbfrontendfree function located in the drivers/media/dvb-core/dvbfrontend.c file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects...

The vulnerability of the ptp_unpack_OPL function in the libmtp library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ptpunpackOPL function in the libmtp library exists due to a mistake related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code when a mobile device is connected via a USB cable...