USN-3816-2 systemd vulnerability

USN-3816-1 fixed several vulnerabilities in systemd. However, the fix for CVE-2018-6954 was not sufficient. This update provides the remaining fixes. We apologize for the inconvenience. Original advisory details: Jann Horn discovered that unitdeserialize incorrectly handled status messages above ...

PYSEC-2018-74

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation...

skia/image_filter_deserialize: Crash in SkTInternalLList<TriangulationVertex>::addToTail

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5674426696204288 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerubsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash...

UBUNTU-CVE-2018-17234

Memory leak in the H5Ochunkdeserialize function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumption via a crafted HDF5 file...

HDF5 Memory Leak Vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A memory leak vulnerability exists in the 'H5Ochunkdeserialize' function of the H5Ocache.c file in HDF5 1.10.3 and earlier...

Vanilla: Vanilla Forums ImportController index file_exists Unserialize Remote Code Execution Vulnerability

Summary: An authenticated admin user can inject an serialized payload into a phar archive and trigger read access to it via an unprotected fileexists. An attacker can leverage this to deserialize untrusted data and gain remote code execution. Notes: - You need to have an admin account to run this...

PT-2018-3948 · Hdf +4 · Hdf5 +4

Name of the Vulnerable Software and Affected Versions: HDF5 versions through 1.10.3 Description: The issue is related to a memory leak in the H5O chunk deserialize function in the H5Ocache.c component of the HDF5 library. This allows attackers to cause a denial of service by consuming memory via ...

skia/textblob_deserialize: Use-of-uninitialized-value in SkScalarSignAsScalar

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5671296839450624 Project: skia Fuzzer: libFuzzerskiatextblobdeserialize Fuzz target binary: textblobdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

skia/image_filter_deserialize: Use-of-uninitialized-value in Edge::intersect

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5719122913525760 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

HDF5 'H5O__chunk_deserialize' function null pointer dereference vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Ochunkdeserialize' function in the H5Ocache.c file in HDF5 version 1.10.2. A remote...

UBUNTU-CVE-2018-11204

A NULL pointer dereference was discovered in H5Ochunkdeserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

skia/image_filter_deserialize: Use-of-uninitialized-value in SkMatrix::getType

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5730209966850048 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5050717552246784 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_unpremul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5783723816517632 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Crash in S32_alpha_D32_nofilter_DX

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5436839977549824 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_unpremul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6658294484566016 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in clip_color

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5658501595529216 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

Kaltura - Remote PHP Code Execution over Cookie Exploit

This Metasploit module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura makes use of a hard-coded cookie secret which allows to sign arbitrary cookie data...

skia/image_filter_deserialize: Use-of-uninitialized-value in SkMatrix::getType

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5829799923679232 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5663038557388800 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...