DEBIAN-CVE-2018-7435

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...

Linux kernel USB core subsystem 'usb_destroy_configuration' function out-of-bounds write access vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the U.S. The USB core subsystem is one of the USB core subsystems. An out-of-bounds write access vulnerability exists in the 'usbdestroyconfiguration' function of the...

DEBIAN-CVE-2017-17558

The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service...

Germany bans kids smartwatches, asks parents to destroy them

By Waqas Garmanys Telecoms regulator the Federal Network Agency The Bundesnetzagentur which This is a post from HackRead.com Read the original post: Germany bans kids smartwatches, asks parents to destroy them...

UBUNTU-CVE-2017-12670

In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service...

cfme: Execution of arbitrary methods through filter param

It was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to e.g. destroying VMs...

Qemu: usb: redirector: memory leakage when destroying redirector

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

Google gRPC Denial of Service Vulnerability

Google gRPC is the United States Google Google company developed a mobile and HTTP/2 design for open source, general-purpose RPC framework, with two-way flow, flow control, header compression, a single TCP connection on the multiple multiplexing requests and other features. A denial of service...

PYSEC-2017-101

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

DEBIAN-CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...

PT-2017-16761

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, by providing a crafted rule that is mishandled in the yr compiler destroy function...

JasPer Denial of Service Vulnerability (CNVD-2017-03800)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the jp2colrdestroy function in the jp2cod.c file in versions of JasPer prior to 1.900.13. A remote attacker can exploit this vulnerability to...

UBUNTU-CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

MariaDB Server 10.1.x < 10.1.20 Multiple DoS

Binary data 9914.prm...

DEBIAN-CVE-2016-9907

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in the JasPer function jp2colrdestroy, which can be exploited by an attacker to crash an application and deny service to a legitimate user...

ALPINE-CVE-2016-7413

Use-after-free vulnerability in the wddxstackdestroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes bsc970948. - CVE-2016-3136: mctu232: add sanity checking in probe bnc970955. - CVE-2016-2188: iowarrio...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the RenderWidgetHostImpl::Destroy function located in the content/browser/rendererhost/renderwidgethostimpl.cc file of the Google Chrome browser’s Navigation implementation is related to the use of memory after it is released. Exploiting this vulnerability could allow a remot...