EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1089)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privilege...

DEBIAN-CVE-2017-7718

hw/display/cirrusvgarop.h in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds read and QEMU process crash via vectors related to copying VGA data via the cirrusbitbltropfwdtransp and cirrusbitbltropfwd functions...

libtiff: cpStripToTile heap-buffer-overflow

tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."...

LibTIFF Stack Buffer Overflow Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. LibTIFF suffers from a stack buffer overflow vulnerability that arises from the program...

Legal Robot: S3 ACL misconfiguration

Summary: Legal Robot's s3 bucket legalrobot.com is misconfigured. The ACL allows me to access and copy all files. This means that I could go through and copy all the media files on the s3 bucket. I did not attempt to delete any files as I did not want to go too far and affect your operations. Ste...

libdwarf Integer Overflow Vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. An integer overflow vulnerability exists in libdwarf that stems from the program failing to adequately copy user-supplied data into a buffer. An attacker could use this vulnerability to execute arbitrary code in the...

Race condition

Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc//environ file during a process-setup time interval in which environment-variable copying is incomplete...

shopify-scripts: Range#initialize_copy null pointer dereference

Heya! It's possible to segfault mruby through mruby-engine with the following snippet of code: Range.removemethod:initializecopy 1..2.dup.tos This can be triggered through mruby-engine like this: MRubyEngine.new5121024, 1000, 1000.sandboxeval"/tmp", % Range.removemethod:initializecopy 1..2.dup.to...

Sundown EK: vulnerability to use the tool in copying the masters-vulnerability warning-the black bar safety net

! Description Sundown is currently on the market the latest exploit tool, and the Sundown of the author also successfully proved himself is actually a plagiarism masters. Don't know this“borrow chickens lay eggs”thing was after exposure, and the user will buy his single? Recently, due to the Angl...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/usb/host/ehci-msm2.c file of Qualcomm’s Android operating system is related to the omission of certain minimal calculations before data copying. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially create...

CVE-2014-9899

drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal...

CVE-2014-9899

drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28803909 and Qualcomm internal...

CVE-2016-3792

CVE-2016-3792 affects the Qualcomm Wi‑Fi driver in Android on Nexus 7 (2013) before 2016-07-05. The issue arises from mishandling userspace data copying in CORE/HDD/src/wlan_hdd_hostapd.c, enabling local privilege escalation via a crafted app (requires user interaction). References indicate this ...

CVE-2016-2085

The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack...

Microsoft Internet Explorer Memory Corruption (MS16-023: CVE-2016-0110)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer copies data between two mismatched size arrays considering only the size of the source array. A remote attacker can exploit this issue by...

USN-2879-1: rsync vulnerability

It was discovered that rsync incorrectly handled invalid filenames. A malicious server could use this issue to write files outside of the intended destination directory...

SUSE-SU-2015:2387-1 Security update for grub2

Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 - Check MS-DOS header to find PE file header. bsc954126 - Use dirname for copying Xen kernel and initrd to esp. bsc955493 - Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. bsc954519 - Add luks,...

openvpn: out-of-bound read

The code always tried to copy-out a "struct sockaddrin6" even for IPv4 results, which reads more bytes than getaddrinfo is guaranteed to allocate...

Microsoft Windows PowerShell Script Information Disclosure

An information disclosure exploitation can be executed via a malicious Microsoft Windows PowerShell script. Successful exploitation would allow a remote attacker to copy restricted files with privileged information from the affected system...

CVE-2015-7830

The pcapngreadifdescrblock function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service incorrect free and application crash via a crafted packet that triggers...