kernel: EXT4 memory corruption / SLAB out-of-bounds read

Mounting a crafted EXT4 image read-only leads to an attacker controlled memory corruption and SLAB-Out-of-Bounds reads...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the videousercopy function in the Linux kernel’s drivers/media/video/v4l2-ioctl.c file, within the a v4l2extcontrols data structure of the Linux operating system, is related to resource management errors. Exploiting this vulnerability could allow an attacker to trigger a...

UBUNTU-CVE-2010-5329

The videousercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2extcontrols data structure to determine a kmalloc size, which might allow local users to cause a denial of service memory consumption via a large value...

CVE-2016-5399: Out-of-bounds Write

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted bz2 archive...

Linux kernel content misreference vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A content misreference vulnerability exists in fs/crypto/ in Linux kernel versions prior to 4.10.7. A local attacker can exploit this vulnerability to cause a denial of servic...

DEBIAN-CVE-2016-10318

A missing authorization check in the fscryptprocesspolicy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allows a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of...

Design/Logic Flaw

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6003

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

PT-2017-16822

Name of the Vulnerable Software and Affected Versions dotCMS version 3.7.0 Description The issue allows for XSS, which is reachable from ext/languages manager/edit language in portal/layout via the bottom two form fields. Recommendations For dotCMS version 3.7.0, at the moment, there is no...

CVE-2017-6003: Improper Neutralization of Input During Web Page Generation

dotCMS 3.7.0 has XSS reachable from ext/languagesmanager/editlanguage in portal/layout via the bottom two form fields...

CVE-2017-6909: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Shimmie = 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "shimmie2-master/ext/chatbox/history/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2016-10162: NULL Pointer Dereference

The phpwddxpopelement function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a...

CVE-2016-10160: Off-by-one Error

Off-by-one error in the pharparsepharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch...

CVE-2016-10161: Out-of-bounds Read

The objectcommon1 function in ext/standard/varunserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service buffer over-read and application crash via crafted serialized data that is mishandled in a finishnesteddata call...

CVE-2016-7480: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service uninitialized memory access via crafted serialized data...

CVE-2016-9936: Use After Free

The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834...

openSUSE Security Update : wget (openSUSE-2017-9)

This update for wget fixes the following issues : Security issues fixed : - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. bsc995964 Non security issues fixed : - bsc1005091: Don't call xfree on string returned ...

CVE-2016-9137: Use After Free

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

CVE-2014-9912: Improper Restriction of Operations within the Bounds of a Memory Buffer

The geticudispvaluesrcphp function in ext/intl/locale/localemethods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service buffer overflow or possibly have...

CVE-2016-9934: NULL Pointer Dereference

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...