DEBIAN-CVE-2018-7435

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...

UBUNTU-CVE-2018-7435

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...

PT-2018-18069

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the freexl::destroy cell function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

PT-2018-17769

Name of the Vulnerable Software and Affected Versions Wireshark versions prior to 2.4.5 Description The issue is related to the netmonrec comment destroy function in wiretap/netmon.c, which performs a free operation on an uninitialized memory address. This allows remote attackers to cause a denia...

Linux kernel USB core subsystem 'usb_destroy_configuration' function out-of-bounds write access vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the U.S. The USB core subsystem is one of the USB core subsystems. An out-of-bounds write access vulnerability exists in the 'usbdestroyconfiguration' function of the...

DEBIAN-CVE-2017-17558

The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service...

PT-2017-14855

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.6 Description The issue is related to the usb destroy configuration function in the USB core subsystem, which does not properly consider the maximum number of configurations and interfaces before releasing...

PT-2018-6732

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.3 Description: The issue allows local users to cause a denial of service by leveraging a race condition with dm destroy during creation and removal of DM devices. This is due to a problem in the dm get from...

Germany bans kids smartwatches, asks parents to destroy them

By Waqas Garmanys Telecoms regulator the Federal Network Agency The Bundesnetzagentur which This is a post from HackRead.com Read the original post: Germany bans kids smartwatches, asks parents to destroy them...

UBUNTU-CVE-2017-12670

In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service...

cfme: Execution of arbitrary methods through filter param

It was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to e.g. destroying VMs...

Qemu: usb: redirector: memory leakage when destroying redirector

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

PT-2017-3959

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...

Google gRPC Denial of Service Vulnerability

Google gRPC is the United States Google Google company developed a mobile and HTTP/2 design for open source, general-purpose RPC framework, with two-way flow, flow control, header compression, a single TCP connection on the multiple multiplexing requests and other features. A denial of service...

PYSEC-2017-101

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

DEBIAN-CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...

PT-2017-16761

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, by providing a crafted rule that is mishandled in the yr compiler destroy function...

JasPer Denial of Service Vulnerability (CNVD-2017-03800)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the jp2colrdestroy function in the jp2cod.c file in versions of JasPer prior to 1.900.13. A remote attacker can exploit this vulnerability to...

UBUNTU-CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

PT-2017-17377

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 2.0.13 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted image. This is due to a problem in the jp2 cdef destroy function in jp2...