OESA-2021-1005 mutt security update

Mutt is a small but very powerful text-based mail client for Unix operating systems.\r\n\r\n Security Fixes:\r\n\r\n Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not...

OSV-2018-95 Heap-use-after-free in Envoy::FakeConnectionBase::close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8783 Crash type: Heap-use-after-free READ 1 Crash state: Envoy::FakeConnectionBase::close Envoy::Event::DispatcherImpl::runPostCallbacks eventprocessactivesinglequeue...

PT-2021-27642

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: A heap-use-after-free READ 1 crash has been identified. The crash occurs in the Envoy::FakeConnectionBase::close function, which is called by Envoy::Event::DispatcherImpl::runPostCallbacks an...

MGASA-2020-0476 Updated jackit packages fix security vulnerability

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure,...

Updated jackit packages fix security vulnerability

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure,...

Buffer not correctly recycled in Gzip Request inflation

Impact If GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection and if an attacker can send a request with a body that is received entirely by not consumed by the application, then a subsequent request on the same connection will see...

envoy:h2_capture_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::StreamCallbackHelper::runResetCallbacks

Detailed Report: https://oss-fuzz.com/testcase?key=5673532021014528 Project: envoy Fuzzing Engine: afl Fuzz Target: h2capturepersistentfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000303678 Crash State:...

HTTP Request Smuggling

webrick is vulnerable to HTTP request smuggling. The vulnerability exists as the request parser allows invalid Transfer-Encoding header values of close and keep-alive to be parsed and interpreted incorrectly...

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel prtd is assigned substream->runtime->private_data. Later prtd is freed. However prtd is not sanitized and set to NULL resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check such as msm_pcm_volume_ctl_put() which means this freed memory could be used.

...

CVE-2020-12280

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

Cross site request forgery (csrf)

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to the ability to modify, add, or delete data...

Denial Of Service (DoS)

FFmpeg is vulnerable to Denial Of Service DoS. The avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

PT-2020-9463

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions APQ8009 through SXR1130 Description: Close and bind operations done on a socket can lead to a Use-After-Free condition in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute,...

CVE-2019-14037: Use After Free

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice...

mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.

A cryptographic protocol integrity flaw was discovered in Apache Mina. The closure of a TLS session would not always result in closure of the socket, allowing the conversation to continue in clear text. This could undermine the confidentiality of a connection and potentially disclose sensitive...

PT-2020-21724

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash was reported, classified as an UNKNOWN WRITE. The crash occurred in the uc close function, within the fuzz emu mips 32be.c file. This issue was...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management Close Manager Component

Oracle Hyperion Financial Close Management is designed to provide centralized, Web-based management of period-end close activities in an extended financial close cycle. An unspecified vulnerability exists in the Oracle Hyperion Financial Close Management Close Manager component. An attacker could...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management (CNVD-2020-43724 )

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. A security vulnerability exists in the Close Manager component of Hyperion Financial Close Management version...