Intel, ARM, IBM, AMD Processors Vulnerable to New Side-Channel Attacks

It turns out that the root cause behind several previously disclosed speculative execution attacks against modern processors, such as Meltdown and Foreshadow, was misattributed to 'prefetching effect,' resulting in hardware vendors releasing incomplete mitigations and countermeasures. Sharing its...

openSUSE Security Update : ldb / samba (openSUSE-2020-1023)

"This update for ldb, samba fixes the following issues : Changes in samba : - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

DEBIAN-CVE-2020-15563

An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

The vulnerability of the agroot() function in the Graphviz visualization application, which allows a hacker to cause a service failure

The vulnerability of the agroot function in the Graphviz visualization application is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2019-14072

CVE-2019-14072 describes a race condition in Qualcomm/Snapdragon kernel/JPU handling leading to an unhandled paging request by dereferencing a freed object due to concurrent sparse free and sparse bind ioctls. Affected are Snapdragon Auto/Compute/IoT/Wearables platforms across numerous SoCs (e.g....

DEBIAN-CVE-2019-19203

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

CVE-2019-2334

CVE-2019-2334 is a null pointer dereference in Snapdragon media handling that can occur when playing a clip with a wrong block group id, affecting a broad set of Qualcomm Snapdragon products (Auto, Compute, IoT, Mobile, Wearables, etc.). The NVD and Red Hat entries rate it as HIGH severity with C...

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

The vulnerability of the g_markup_parse_context_end_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextendparse function in the Glib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the libsolv library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the LibVNC library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the LibVNC library is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Eclipse OpenJ9 Buffer Overflow Vulnerability (CNVD-2019-39191)

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in the OpenJDK + Eclipse OpenJ9 0.11.0 builds. An attacker can exploit the vulnerability to accept pointer values that are dereferenced ...

LAquis SCADA LGX Report MemoryReadDouble Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0017-1)

This update for php7 fixes the following issues : - CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 - CVE-2016-9935 Invalid read could lead to crash bsc1015189 - CVE-2016-9936 Use After free...

Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities

Binary data 700332.prm...

xml-security-c -- crashes on malformed KeyInfo content

The shibboleth project reports: SAML messages, assertions, and metadata all commonly make use of the XML Signature KeyInfo construct, which expresses information about keys and certificates used in signing or encrypting XML. The Apache Santuario XML Security for C++ library contained code paths a...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service DoS attacks. The attack can be triggered due to a flaw in unpack function src/librawcxx.cpp, causing null pointer dereferencing...