PT-2021-28074

Name of the Vulnerable Software and Affected Versions blosc affected versions not specified Description The issue is related to a crash that occurs due to a segmentation fault on an unknown address. The crash involves the blosc read header, blosc2 getitem ctx, and blosc getitem functions...

PT-2021-28013

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically se...

PT-2021-27542

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurred in the parse sigalgs list function, and is associated with the SSL CTX set1 sigalgs...

PT-2020-22180

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the blosc run decompression with context, blosc2 decompress ctx, and fra...

PT-2020-22050

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including asn1 item print ctx and asn1 template print ctx. No...

PT-2020-21809

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Bad-free, which occurs during the cleanup process of aes gcm. The crash state involves the functions EVP CIPH...

PT-2020-22369

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including asn1 item print ctx and asn1 template print ctx. No...

DEBIAN-CVE-2019-17185

In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a...

PT-2020-9878

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 3.0.x through 3.0.19 Description The EAP-pwd module in FreeRADIUS used a global OpenSSL BN CTX instance to handle all handshakes, resulting in multiple threads using the same instance concurrently. This leads to crashes whe...

kernel security update

3.10.0-1062.4.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.4.3 - drm drm/i915/cmdparser: Fix jump whitelist clearing Dave Airlie...

Linux kernel denial of service vulnerability (CNVD-2018-24547)

Linux kernel is the kernel used by the open source operating system Linux. crypto subsystem is one of the cryptographic subsystems. Linux kerne versions prior to 4.15-rc4 have a security vulnerability in the crypto subsystem. Each afalgctx, when released instead of aeadtfm, removes the null...

DEBIAN-CVE-2018-14619

A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each afalgctx was freed instead of when the aeadtfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user bein...

Null pointer dereference

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102: NULL Pointer Dereference

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

Teaming Up with HITRUST to Raise Cybersecurity Standards in Healthcare

From cash-hungry hackers to state-sponsored spies and careless insiders, there’s no shortage of cyber threats facing healthcare organizations HCOs today. At Trend Micro, we’ve been protecting organizations operating in the industry for years, but the challenges facing these customers show no sign...

PT-2017-16813

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a memory leak in the vrend renderer init blit ctx function, located in vrend blitter.c. This leak can be triggered by local guest OS users, allowing them to cause a deni...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby, 2 tags, or 3 ctx parameter in a search action...

CVE-2009-4586

Multiple cross-site scripting XSS vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby, 2 tags, or 3 ctx parameter in a search action...