Updated xerces-c packages fix security vulnerability

A use-after-free vulnerability was found in xerces-c in the way an XML document is processed via the SAX API. Applications that process XML documents with an external Document Type Definition DTD may be vulnerable to this flaw. A remote attacker could exploit this flaw by creating a specially...

SUSE-SU-2020:1984-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

OPENSUSE-SU-2020:1015-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

CVE-2020-0305

In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744...

CVE-2020-1647

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

SUSE-SU-2020:1931-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

Intel IGC64.DLL Shader Functionality HeapReAlloc code execution vulnerability

Summary An exploitable double free vulnerability exists in Intel’s IGC64.DLL graphics driver, version 26.20.100.7584. A specially crafted geometry shader can cause a double free vulnerability, leading to arbitrary code execution. An attacker can provide a specially crafted shader file to trigger...

Denial Of Service (DoS)

net-snmp is vulnerable to denial of service. A double-free vulnerability in the usmfreeusmStateReference function in snmplib/snmpusm.c allows an attacker to crash the application via a malicious SNMPv3 GetBulk request...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1712)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-9607

CVE-2020-9607 affects Adobe Acrobat and Reader (versions listed in the record). The issue is a use-after-free in the products, which could enable arbitrary code execution on successful exploitation. The documented impact is partial to high, depending on metric (NVD shows CVSS v3.1 base score 7.8,...

Design/Logic Flaw

VMware ESXi 7.0 before ESXi7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.2, and Fusion 11.x before 11.5.2 contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be abl...

Design/Logic Flaw

VMware ESXi 7.0 before ESXi7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain a use-after-free vulnerability in the SVGA device. A malicious actor with local access to a virtual machine wi...

CVE-2020-14416

In the Linux kernel before 5.4.16, a race condition in tty-discdata handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c...

SUSE SLED15 / SLES15 Security Update : sysstat (SUSE-SU-2020:1419-1)

This update for sysstat fixes the following issues : CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

FreeBSD : Flash Player -- arbitrary code execution (196b31b8-aa9a-11ea-a59a-6451062f0f7a)

Adobe reports : - This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2020-9633. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques...

Flash Player -- arbitrary code execution

Adobe reports: This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2020-9633...

Mobotix (Shanghai) Software Technology Co., Ltd. is vulnerable to double free vulnerability

Extreme Viewer is a fast viewing software, compatible with all major image formats, and also supports raw, psd, cr2 and so on. Ltd., there is a double free vulnerability, the attacker through the poc can cause the software to crash, the successful exploitation of this vulnerability can lead to...

CVE-2020-12387

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR 68.8, Firefox 76, and Thunderbird 68.8.0...

Race condition

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR 68.8, Firefox 76, and Thunderbird 68.8.0...