5369 matches found
CVE-2011-2334
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections...
CVE-2011-2335
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function...
SUSE-SU-2019:2956-1 Security update for qemu
This update for qemu fixes the following issues: - Remove a backslash '' escape character from 80-qemu-ga.rules bsc1153358 Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character. - Fix use-after-free in slirp...
SUSE-SU-2019:2954-1 Security update for qemu
This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp CVE-2018-20126 bsc1119991 - Fix potential DOS in lsi scsi controller emulation CVE-2019-12068 bsc1146873 - Expose taa-no 'feature',...
openSUSE Security Update : gdal (openSUSE-2019-2466)
This update for gdal to version 2.4.3 fixes the following issues : gdal was updated to 2.4.3 : - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc boo1153918. - Multiple bug and stability fixes For more information regarding the release at:...
OPENSUSE-SU-2019:2466-1 Security update for gdal
This update for gdal to version 2.4.3 fixes the following issues: gdal was updated to 2.4.3: - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc boo1153918. - Multiple bug and stability fixes For more information regarding the release at:...
CVE-2019-10524
Lack of check for a negative value returned for getclk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...
ALSA-2019:3643 Low: gettext security update
The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...
[SECURITY] [DLA 1971-1] libarchive security update
Package : libarchive Version : 3.1.2-11+deb8u8 CVE ID : CVE-2019-18408 An issue has been found in libarchive, a multi-format archive and compression library. In case of a crafted archive containing several parts and one part being corrupt, there would be an use-after-free for the next part of the...
Amazon Linux 2 : curl (ALAS-2019-1340)
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481 Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Lin...
CVE-2019-8176
CVE-2019-8176 is a use-after-free vulnerability in Adobe Acrobat and Reader across multiple old versions (2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). The underlying issue is a use-after-free condition that could allow arbitrary code execution upon successf...
USN-4157-1: Linux kernel vulnerabilities
Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14814, CVE-2019-14815,...
Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4157-1)
Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14814, CVE-2019-14815,...
CVE-2019-5527
CVE-2019-5527 is a use-after-free in the virtual sound device affecting VMware ESXi, Workstation, Fusion, VMRC and Horizon Client. The issue allows a local attacker with low privileges on a guest to potentially execute code on the host, with impact on confidentiality, integrity and availability d...
CVE-2019-5053
An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...
Exploit for Double Free in Whatsapp
CVE-2019-11932 How a double-free bug in WhatsApp turns to RC...
Amazon Linux AMI : curl (ALAS-2019-1294)
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. CVE-2019-5481 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon...
Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X
An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...
VMSA-2019-0014 : Use-after-free vulnerability
ESXi use-after-free vulnerability - CVE-2019-5527 ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. A local attacker with non-administrative access on the guest machine may exploit this issue to execute code on the host. This...