CVE-2017-18305

XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835...

CVE-2017-18305

CVE-2017-18305 affects Qualcomm Snapdragon components (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 835). The XBL secure memory dump system call can unlock all XPUs to gain complete control of EL3 if the enable fuse is not blown, representing local privilege escalation with full confidentiality,...

PT-2018-6824

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile versions MDM9206, MDM9607, MDM9650 Snapdragon Wear versions MDM9206, MDM9607, MDM9650 Snapdragon Mobile versions SD 210, SD 212, SD 205 Snapdragon Mobile versions SD 835 Description: The issue allows for complete control of...

CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

Design/Logic Flaw

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

DEBIAN-CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

Immunity Canvas: DMESG_LEAK

Name| dmesgleak ---|--- CVE| CVE-2018-14656 Exploit Pack| CANVAS Description| dmesgleak Notes| CVE Name: CVE-2018-14656 NOTES: This module gives an unpriviledged user the ability to dump a file from the kernel memory. A common scenario is to dump the /etc/shadow or kerberos tickets. Note: This on...

CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

CVE-2018-14656

Summary: CVE-2018-14656 describes a Linux kernel flaw where a missing address check in the callers of show_opcodes() can cause dumping of kernel memory into the dmesg log. The linked connected documents (Unity Linux advisories and OSV entries) confirm this kernel memory disclosure behavior. Affec...

CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

CVE-2018-14656: Improper Input Validation

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

Pdfalto Buffer Overflow Vulnerability

Pdfalto is a command-line tool for parsing PDF files and generate XML structured content in ALTO format. Pdfalto 0.2 and previous versions of the XmlAltoOutputDev.cc file of the 'TextPage::dump' function of the heap buffer overflow vulnerability, an attacker can be exploited to execute arbitrary...

CVE-2018-17338

An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc...

CVE-2018-17338

An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc...

CVE-2018-17338

An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc...

CVE-2018-17338: Out-of-bounds Write

An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc...

PT-2018-13989

Name of the Vulnerable Software and Affected Versions pdfalto versions prior to 0.3 Description A heap-based buffer overflow issue has been identified in the function TextPage::dump in XmlAltoOutputDev.cc. Recommendations For versions prior to 0.3, update to version 0.3 or later to resolve the...

JDK: path traversal flaw in the Diagnostic Tooling Framework

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0 does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882...

JDK: path traversal flaw in the Diagnostic Tooling Framework

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0 does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882...

DEBIAN-CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...