UBUNTU-CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20175

rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...

CVE-2018-20175

CVE-2018-20175 affects rdesktop up to and including v1.8.3. The vulnerability stems from several Integer Signedness errors in mcs.c that cause Out-of-Bounds Reads, leading to Denial of Service (segfault). Connected advisories confirm the issue across multiple distributions and indicate fixes in l...

Moderate: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

PHP 5.6.x < 5.6.40 Multiple vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40, 7.1.x prior to 7.1.26, 7.2.x prior to 7.2.14 or 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc...

PHP 7.1.x < 7.1.26 Multiple vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40, 7.1.x prior to 7.1.26, 7.2.x prior to 7.2.14 or 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc...

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-autostart utility for configuring automatic startup of programs in the Astra Linux operating system is related to the lack of checking for the value of a pointer being set to NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the union data structure interpretation in Xen hypervisors, related to background data corruption, allows attackers to cause service failures or increase their privileges within the system.

The vulnerability of the union data structure interpretation in Xen hypervisors is related to errors during data underpressure situations. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges within the system...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript, related to type conversion errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to type conversion errors. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

GLSA-201903-02 : Zsh: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201903-02 Zsh: User-assisted execution of arbitrary code Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line...

PT-2019-2301 · Jenkins · Jenkins Matrix Project Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Matrix Project Plugin versions 1.13 and earlier Description: A sandbox bypass issue exists, related to errors in input data processing during code parsing in components such as pom.xml and FilterScript.java. This allows attackers with...

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of LBMPD devices in Wireshark, a network traffic analysis tool, allows attackers to cause service interruptions.

The vulnerability of LBMPDM dissectors wireshark/epan/dissectors/packet-lbmpdm.c, a traffic analyzer for computer networks in Wireshark, is related to errors in the processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially...

The vulnerability of Google Chrome web browser’s SVG object processing mechanism, which allows attackers to trigger a service failure.

The vulnerability of the Google Chrome browser’s SVG object processing mechanism is related to type definition errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

openSUSE: Security Advisory for supportutils (openSUSE-SU-2019:0293-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser is related to memory management errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created PDF file...

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component in Microsoft Office and Office 365 programs is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

java-1.7.0-openjdk security update

1:1.7.0.211-2.6.17.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.211-2.6.17.1 - Produce debug symbols for libpulse-java.so - Set ITCFLAGS=-g so that debug symbols for the pulse audio - native library are being produced. This is needed to fix - rpmdiff errors of missing .debuginfo in...

The vulnerability of the ChakraCore JavaScript script handler, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code with privileges of the current user.

The vulnerability of the ChakraCore JavaScript script handler is related to errors in memory object handling mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user, using a specially crafted web page...

The vulnerability of the Internet Explorer browser, related to errors in memory object handling mechanisms, allows attackers to execute arbitrary code with privileges of the current user.

The vulnerability of the Internet Explorer browser is related to errors in the memory object handling mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the current user, through a specially crafted web page...