PT-2018-2779 · Quagga +5 · Quagga +5

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 1.2.3 Description: The issue is related to the implementation of the BGP protocol in Quagga software, specifically a double-free memory error when handling certain forms of UPDATE messages that contain cluster-list...

Moderate: Red Hat Security Advisory: collectd security update

An update for collectd is now available for Red Hat OpenStack Platform 12.0 Operational Tools for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Debian: Security Advisory (DLA-972-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:0135-1 Security update for gd

This update for gd fixes one issues. This security issue was fixed: - CVE-2017-6362: Prevent double-free in gdImagePngPtr that potentially allowed for DoS or remote code execution bsc1056993...

EulerOS 2.0 SP2 : ldns (EulerOS-SA-2017-1337)

According to the version of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231 Note that Tenable Network Security ha...

AZL-10413 CVE-2017-1000232 affecting package ldns for versions less than 1.7.0-32

A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors...

CVE-2017-1000232

A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors...

CVE-2017-1000232

CVE-2017-1000232 is a double-free in ldns 1.7.0, specifically in str2host.c. The vulnerability’s impact is described as unspecified in the available sources. Multiple connected advisories indicate fixes in newer ldns packages (e.g., Debian LTS DLA-2910-1 for 1.7.0-1+deb9u1, Mageia update, Fedora/...

CVE-2017-16820

The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...

CVE-2017-16820

The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...

CVE-2017-16820

The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...

CVE-2017-15186

CVE-2017-15186 is a double-free vulnerability in FFmpeg 3.3.4 and earlier that can be exploited remotely by processing a crafted AVI file to cause a denial of service. The connected sources confirm this flaw affects FFmpeg’s AVI handling and was fixed in subsequent releases (e.g., Debian’s FFmpeg...

CVE-2015-5177

CVE-2015-5177 describes a double-free vulnerability in OpenSLP 1.2.1 where the SLPDProcessMessage() routine can be triggered by a crafted package, leading to remote denial of service (crash). Multiple sources corroborate a remote-exploitation vector via OpenSLP, with affected products including O...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...

CVE-2017-14952

Double free in i18n/zonemeta.cpp in International Components for Unicode ICU for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue...

Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipclogcontextdestroy. Another issue is th...

[ASA-201710-9] lib32-krb5: arbitrary code execution

Arch Linux Security Advisory ASA-201710-9 ========================================= Severity: High Date : 2017-10-05 CVE-ID : CVE-2017-11462 Package : lib32-krb5 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-415 Summary ======= The package lib32-krb5 befor...

Debian DLA-1106-1 : libgd2 security update

A double-free vulnerability was discovered in the gdImagePngPtr function in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a specially crafted file is processed. For Debian 7 'Wheezy',...