Huawei Mate 10 Phone Memory Misreference Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. A memory misreference vulnerability exists in the mediaserver component of the Huawei Mate 10 phone. An attacker induces a user to install a malicious application that causes certain freed memory to be accessed again. Successful...

Race condition

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver...

CVE-2017-9691

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver...

DEBIAN-CVE-2018-1302

When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter...

ALPINE-CVE-2018-1302

When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter...

Race condition

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition protection while updating msg mask table can lead to buffer over-read. Also access to freed memory can happen while updating msgmask information...

CVE-2017-8279: Concurrent Execution using Shared Resource with Improper Synchronization

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition protection while updating msg mask table can lead to buffer over-read. Also access to freed memory can happen while updating msgmask information...

CVE-2017-9697

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diagdbgfsreadtable...

CVE-2017-8281

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI...

PT-2017-18234

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue arises in the msm pcm playback close function where prtd is assigned substream-runtime-private data. After prtd is freed, it is not sanitized and set to NULL, resulting in a danglin...

Denial Of Service (DoS) Through Memory Overwrite

OepnSSL is vulnerable to denial of service DoS attacks through memory overwrite and client application crash. If a multithreaded client connects to a malicious server using a resumed session, it is possible to trigger a race condition in the sslparseserverhellotlsext function which allows an...

Updated libksba packages fix security vulnerability

It was found that an unproportionate amount of memory is allocated when parsing crafted certificates in libskba, which may lead to DoS. Moreover in libksba 1.3.4, allocated memory is uninitialized and could potentially contain sensitive data left in freed memory block...

curl: multiple issues

CVE-2016-5419 authentication bypass libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established...

RHEL 6 : kernel (RHSA-2016:1225)

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the Network Security Services library allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the ssl3HandleECDHServerKeyExchange function in the Network Security Services library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects when establishing an SSL connection...

Microsoft Internet Explorer Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-01536)

Internet Explorer is a web browser from Microsoft. A vulnerability in the handling of "range" type HTML input elements in some versions of Internet Explorer can be exploited by an attacker with a malicious web page or file to reuse a freed memory structure to execute arbitrary code in the context...

FreeBSD : NSS -- multiple vulnerabilities (c4292768-5273-4f17-a267-c5fe35125ce4)

Mozilla Foundation reports : Security researcher Francis Gabriel reported a heap-based buffer overflow in the way the Network Security Services NSS libraries parsed certain ASN.1 structures. An attacker could create a specially crafted certificate which, when parsed by NSS, would cause it to cras...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a multi-level PDF document...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Video object...

OracleVM 3.3 : openldap (OVMSA-2015-0123)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263171 - fix: nslcd segfaults due to incorrect mutex initialization 1144294 - fix: Updating openldap deletes database if slapd.conf ...