9685 matches found
UBUNTU-CVE-2017-7741
In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...
UBUNTU-CVE-2017-7742
In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...
libsndfile 'flac_buffer_copy()' function denial of service vulnerability
libsndfile is a C library that reads and writes audio files in AIFF, AU, and WAV formats through a standard interface. A security vulnerability exists in the 'flacbuffercopy' function in versions of libsndfile prior to 1.0.28. An attacker can exploit this vulnerability to cause a stack buffer...
UBUNTU-CVE-2017-7585
In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file...
Huawei HiSuite Information Disclosure Vulnerability
Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An information disclosure vulnerability exists in Huawei HiSuite version 4.0.5.300OVE, due to the password box in the proxy settings screen not disabling the copy function. An attacker can exploit this vulnerabili...
The vulnerability of the mm/gup.c component in the Linux operating system allows a hacker to increase their privileges.
The vulnerability of the mm/gup.c component in the Linux operating system exists due to insufficient checking of resource status when it can be used concurrently. Exploiting this vulnerability allows an attacker, operating locally, to enhance their privileges by improperly using the Copy-Write CO...
Cisco IOS XE Smart Install Protocol Misuse (cisco-sr-20170214-smi)
The remote Cisco IOS XE device has the Smart Install Feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a...
shopify-scripts: SIGSEGV in array_copy - array.c:71
File 2 as input causes a segfault in mruby. mruby crashes in arycopy array.c:71: Program received signal SIGSEGV, Segmentation fault. 0x000000000040e088 in arraycopy src=, size=, dst= at /tmp/mruby/src/array.c:71 71 dsti = srci; Test platform: Linux 3.16.0-4-amd64 1 SMP Debian 3.16.39-1+deb8u1...
OracleVM 3.3 / 3.4 : openssh (OVMSA-2017-0053)
The remote OracleVM system is missing necessary patches to address critical security updates : - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 - Fix missing hmac-md5-96 from server offer 1373836 - Prevent...
DEBIAN-CVE-2017-7304
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check in the copyspecialsectionfields function for an invalid shlink field before attempting to follow it. This vulnerability causes Binutils...
Fox Digital Copy (Beta) - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Fox Digital Copy Beta published at the 'play' market has multiple vulnerabilities...
PCRE 'pcre32_copy_substring' function buffer overflow vulnerability (CNVD-2017-04912)
PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in the 'pcre32copysubstring' function in the pcreget.c file of libpcre1 in PCRE version 8.40. A...
LibTIFF tools/tiffcp.c file heap buffer overflow vulnerability
LibTIFF is a library for reading and writing the Tagged Image File Format abbreviated as TIFF. A heap buffer overflow vulnerability exists in the tools/tiffcp.c file in LibTIFF version 4.0.7. A remote attacker could use this vulnerability to cause a denial of service integer overflow with a...
Backup Copy Seeding and Mapping for Cloud Connect
Objective This article documents how to seed a Backup Copy job for use with a Cloud Repository from a Veeam Cloud Service Provider. Solution Critical Notes Starting with Veeam Backup & Replication v10, there are now two different backup copy modes: Immediate copy and Periodic copy. The mode used ...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
Design/Logic Flaw
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
DEBIAN-CVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...
