301 matches found
USN-3805-1 curl vulnerabilities
Harry Sintonen discovered that curl incorrectly handled SASL authentication. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-16839 Brian Carpenter discovered that curl incorrectly handled memory when...
use after free in handle close
libcurl contains a heap use after free flaw in code related to closing an easy handle. When closing and cleaning up an "easy" handle in the Curlclose function, the library code first frees a struct without clearing the pointer and might then subsequently erroneously write to a struct field within...
UBUNTU-CVE-2018-16840
A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently...
Design/Logic Flaw
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...
CVE-2018-12882
exifreadfromimpl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free in exifreadfromfile because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exifreaddata function...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
Threat Outbreak Alert RuleID31560: Email Messages Distributing Malicious Software on December 7, 2017
Medium Alert ID: 56191 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31560 may contain the following files: Name |...
Apache httpd 'mod_http2' Denial of Service Vulnerability
Apache HTTP Server is an open source web server from the Apache Software Foundation. A security vulnerability in the Apache httpd HTTP/2 processing code allows remote attackers to conduct denial-of-service attacks by submitting special requests and in some cases closing multiple connections...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
undertow: IO thread DoS via unclean Websocket closing
It was found that with non-clean TCP close, Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
DEBIAN-CVE-2017-5356
Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...
CVE-2017-5356
Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...
pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...
pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...
pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...
pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...
pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...
HackerOne: Manipulate report timeline activity by using null byte.
Null bytes are not permitted in report body, or even in report title. But that can be used in the comment section of self-closing for reporter and change-status for team. When a null byte is used as a comment, that report timeline activity disappears! For example:...
Cash Closing Calculator FREE - Customized SSL, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Cash Closing Calculator FREE published at the 'play' market has multiple vulnerabilities...
The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the nsHtml5TreeBuilder class in the Thunderbird HTML5 client browser, as well as in Firefox and Firefox ESR browsers, arises due to a loss of precision. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure disruption of resourc...