CVE-2018-9498: Integer Overflow or Wraparound

In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1...

CVE-2018-9498

In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19581)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in wmafillroamsynchbuffer in Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

HDF5 Buffer Overflow Vulnerability (CNVD-2019-03454)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A heap buffer overflow vulnerability exists in the 'H5Ofillnewdecode' of the H5Ofill.c file in HDF version 51.8.20, which can be...

PT-2018-12235

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the H5O fill old decode function in H5Ofill.c. Recommendations For version 1.8.20, consider updating to a newer version that contains a fix for this issue,...

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

DEBIAN-CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

ALPINE-CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

UBUNTU-CVE-2018-7167

Calling Buffer.fill or Buffer.alloc with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc and Buffer.fill were updated so that they zero fill instead of hanging in these cases. All versions of...

PT-2018-17926

Name of the Vulnerable Software and Affected Versions Node.js versions 6.x through 9.x Description The issue arises when calling Buffer.fill or Buffer.alloc with certain parameters, leading to a hang and potentially resulting in a Denial of Service. The implementations of Buffer.alloc and...

PT-2018-17433

Name of the Vulnerable Software and Affected Versions Trend Micro Smart Protection Server Standalone versions 3.x Description A vulnerability could allow an unauthenticated remote attacker to manipulate the product, sending a large number of specially crafted HTTP requests, potentially causing th...

CVE-2018-6237: Uncontrolled Resource Consumption

A vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service DoS...

[SECURITY] Fedora 28 Update: leptonica-1.76.0-1.fc28

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

PT-2018-10396 · Hdf +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.2 Description: An out of bounds read was discovered in the H5O fill new decode and H5O fill old decode functions in the H5Ofill.c file of the HDF5 library. This issue could allow a remote denial of service or information...

PT-2018-3499

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18 Description: The issue is related to a use after free in the fs/xfs/xfs super.c component of the Linux kernel. This could allow an attacker to gain unauthorized access to information and compromise its...

Apple SafarS and iOS Safari Login AutoFill Information Disclosure Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the auto-fill field component. A security...

PT-2018-1619

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1 Description The issue is caused by an integer overflow in the SkSampler::Fill method of SkSampler.cpp, which can lead to a possible out of bounds write. This could allow a remote attacker to execute arbitrary...

Linux kernel denial of service vulnerability (CNVD-2018-08147)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in 4.15.15 and earlier versions of the Linux kernel. The vulnerability arise...

Dup Scout Enterprise 10.5.12 - Share Username Local Buffer Overflow

Dup Scout Enterprise 10.5.12 - Share Username Local Buffer Overflow !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Dup Scout Enterprise 10.5.12 - Local Buffer Overflow Date: 02-22-2018 Vulnerable Software: Dup Scout Enterprise v10.5.12 Vendor Homepage: http://www.dupscout.com...