SUSE-SU-2020:14337-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.6.1 ESR MFSA 2020-11 bsc1168630 CVE-2020-6819 bmo1620818 Use-after-free while running the nsDocShell destructor CVE-2020-6820 bmo1626728 Use-after-free when handling a ReadableStream...

GLSA-202004-04 : Qt WebEngine: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202004-04 Qt WebEngine: Arbitrary code execution A use-after-free vulnerability has been found in the audio component of Qt WebEngine. Impact : A remote attacker could entice a user to open a specially crafted media file in an...

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

OPENSUSE-SU-2020:0388-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8647: There was a use-after-free vulnerability in the vcdoresize function in drivers/tty/vt/vt.c bnc1162929 1164078. - CVE-2020-8649: There was a use-after-free...

SUSE SLED15 / SLES15 Security Update : ldns (SUSE-SU-2020:0801-1)

This update for ldns fixes the following issues : CVE-2017-1000231: Fixed a buffer overflow during token parsing bsc1068711. CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c bsc1068709. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE-SU-2020:0801-1 Security update for ldns

This update for ldns fixes the following issues: - CVE-2017-1000231: Fixed a buffer overflow during token parsing bsc1068711. - CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c bsc1068709...

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

AZL-6791 CVE-2019-20633 affecting package patch 2.7.6-8

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

CVE-2020-3792

Adobe Acrobat/Reader CVE-2020-3792 is a use-after-free vulnerability affecting multiple old builds (2020.006.20034 and earlier; 2017.011.30158 and earlier; 2015.006.30510 and earlier). Successful exploitation could lead to arbitrary code execution. Public references (APSB20-13) document multiple ...

Design/Logic Flaw

Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5184

An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code...

Important: kernel

Issue Overview: A stack buffer overflow issue was found in the getrawsocket routine of the Host kernel accelerator for virtio net vhost-net driver. It could occur while doing an ictolVHOSTNETSETBACKEND call, and retrieving socket name in a kernel stack variable via getrawsocket. A user able to...

CVE-2020-1862

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions...

CVE-2020-1862

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions...

Double free

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions...

Security Advisory - Double Free Vulnerability in Some Huawei Products

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Vulnerability ID: HWPSIRT-2019-09024 This vulnerability has...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0558-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources bsc1163971...

CVE-2019-14029

CVE-2019-14029 describes a use-after-free in the graphics module caused by destroying an already queued syncobj in error handling, affecting a wide range of Qualcomm/Snapdragon devices (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, etc.) across multiple SKUs (APQ8009,...