CVE-2019-17635

CVE-2019-17635 affects Eclipse Memory Analyzer up to version 1.9.1. The issue is a deserialization vulnerability triggered when an index file from a parsed heap dump is replaced by a malicious version and the user reopens the heap dump with the untrusted index. Affected also are local configurati...

CVE-2019-17634: Improper Neutralization of Input During Web Page Generation

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting XSS vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump coul...

PT-2020-1634

Name of the Vulnerable Software and Affected Versions Eclipse Memory Analyzer versions 1.9.1 and earlier Description The issue is related to errors in processing specially crafted HTML requests in the reporting component of the Eclipse Memory Analyzer software for Java application analysis...

CVE-2019-17635: Deserialization of Untrusted Data

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the heap dump is reopened in Memory Analyzer. The user must chose to reopen an already parsed heap dump with an untrusted...

kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service DoS, or possibly have unspecified other impa...

Juniper Networks Junos OS pccd Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains security vulnerabilities. An attacker can exploit this vulnerability with malformed Pat...

UBUNTU-CVE-2019-20166

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomdump in isomedia/boxdump.c...

GPAC code issue vulnerability (CNVD-2020-00525)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfisomdump' function of the isomedia/boxdump.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for a...

PT-2019-16113

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A use-after-free issue was found in the function gf isom box dump ex in isomedia/box funcs.c. Recommendations For GPAC version 0.8.0, update to a version that fixes this issue...

PT-2019-16111

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom dump in isomedia/box dump.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, update to a...

CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

CVE-2019-2288

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

Design/Logic Flaw

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-2288

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-2288

CVE-2019-2288 is a reported out-of-bounds write in the TZ secure-dump path on Qualcomm Snapdragon platforms (multiple SoCs). The vulnerability occurs when copying a secure dump structure into a memory buffer provided by the HLOS, affecting a wide set of Snapdragon products. The NVD/NVD-derived me...

PT-2019-16359

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to an out of bound write in the TZ while copying the secure dump structure on the HLOS provided buffer as part of the memory dump. This affects vario...

CVE-2019-2288: Buffer Copy without Checking Size of Input

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

Hacking Hardware Password Managers: The RecZone

TL:DR Hardware security can be difficult to fathom, so I set out to research three password vaults as a newbie, sharing my findings. I picked three popular hardware vaults, each with different components, requiring different skills and equipment. Here's how I learned about disassembly, chipset...

Denial Of Service (DoS) Through Null Pointer Dereference

fabio is vulnerable to denial of service DoS attacks. The affected Dump function in table.go allows malicious users to cause a NULL pointer dereference in detailed config log, potentially leading to a denial of service condition...

CVE-2019-19047

A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...