PHP 7.1.x < 7.1.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.1. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that is triggered when handling unserialized object properties. An unauthenticated, remote attacker c...

ICSA-19-038-01 Siemens SICAM A8000 RTU Series

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM A8000 RTU Vulnerability: Uncaught Exception 2. RISK EVALUATION The SICAM A8000 RTU series is affected by a security vulnerability that could allow unauthenticated remote...

Fedora 28 : xen (2018-a7862a75f5)

preemption checks bypassed in x86 PV MM handling XSA-264, CVE-2018-12891 1595959 x86: DB exception safety check can be triggered by a guest XSA-265, CVE-2018-12893 1595958 libxl fails to honour readonly flag on HVM emulated SCSI disks XSA-266, CVE-2018-12892 1595957 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : net-snmp (SUSE-SU-2018:3333-1)

This update for net-snmp fixes the following issues : Security issues fixed : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

Memory corruption

An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception...

CVE-2018-20652

An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception...

WEM Admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!"

WEM admin console fails to connect with error "Error while connecting to the specified Infrastructure Server!" The Citrix WEM Console Trace.Log file located in the user profile %username% reports the following error: "Exception - ConnectToBroker.Run : System.Net.Sockets.SocketException : No...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

DEBIAN-CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

Code injection

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

CVE-2018-20544 in libcaca 0.99.beta19 is a floating point exception in caca/dither.c (caca_dither_bitmap). Connected advisories show multiple vendors issuing fixes (e.g., openSUSE/SUSE, Ubuntu, Debian) and refer to a libcaca update that addresses this and related CVEs (20545–20549). The updates t...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

Libcaca Floating Point Exception Vulnerability

libcaca is a software library that converts images to color ASCII art. A floating point exception vulnerability exists in the cacaditherbitmap function in caca/dither.c in libcaca 0.99.beta19, which can be exploited by an attacker to cause a denial of service...

CVE-2018-20544

There is floating point exception at caca/dither.c function cacaditherbitmap in libcaca 0.99.beta19...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2018-1417)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 - jasper: NULL pointer exception in jp2encode CVE-2017-1000050 Note that Tenable...

FreeBSD : shibboleth-sp -- crashes on malformed date/time content (4f8665d0-0465-11e9-b77a-6cc21735f730)

The Shibboleth Consortium reports : SAML messages, assertions, and metadata all commonly contain date/time information in a standard XML format. Invalid formatted data in such fields cause an exception of a type that was not handled properly in the V3 software and causes a crash usually to the...

Nextcloud: Passwords being stored as plain text in logging

When an exception occurs, any password sent to or being processed by the server may be stored as plain text in the log. I noticed that some methods are already being filtered in ExceptionSerializer.php, but many methods are missing from this list. Suggestion: instead of relying on a list of...