MGASA-2017-0157 Updated gc packages fix security vulnerability

Kuang-che Wu discovered that multiple integer overflow vulnerabilities existed in libgc. An attacker could use these to cause a denial of service application crash or possibly execute arbitrary code CVE-2016-9427...

Microsoft MsMpEng - Remotely Exploitable Use-After-Free due to Design Issue in GC Engine Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing the JS stack as well as a...

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing the JS stack as well as a few other hardcoded objects, traversing reachable...

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing t...

Internet Bug Bounty: Incorrect GC behavior in xxlimited could lead to use-after-free

Issue submitted: http://bugs.python.org/issue29398 xxlimited module exist only in Python3.6 compiled on Linux. Starting program: /usr/bin/python3.6 xlimited.py Thread debugging using libthreaddb enabled Using host libthreaddb library "/usr/lib/libthreaddb.so.1". Program received signal SIGSEGV,...

openSUSE Security Update : gc (openSUSE-2016-1487)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-1487. The text...

openSUSE Security Update : gc (openSUSE-2016-1479)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SUSE SLED12 / SLES12 Security Update : gc (SUSE-SU-2016:3057-1)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLED12 / SLES12 Security Update : php5 (SUSE-SU-2016:2975-1)

This update for php5 fixes the following issues : - CVE-2016-9137: Use After Free in unserialize bsc1008029 - CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC bsc986247 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

Internet Bug Bounty: Use After Free Vulnerability in SNMP with GC and unserialize()

https://bugs.php.net/bug.php?id=72479 P.S. This bug can be triggered remotely without call to the gccollectcycles since GC can also be invoked automatically in during deserialization. Like the following code: $xxx, 'yyy' = 1; $callgcpoc = strreplace'yyy', 'xxx', serialize$arr;...

shadow - Firefox/Jemalloc Heap Exploitation Swiss Army Knife

A new, extended and renamed ; version of the Firefox/jemalloc heap exploitation swiss army knife. shadow has been tested with the following: Windows 8.1 x86-64 Windows 7 SP1 x86 and x86-64 WinDBG 6.3.9600.17200 x86 since Firefox stable is x86-only currently pykd version 0.3.0.36 Many different...

PT-2020-5626 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJit versions 2.1.0-beta3 and earlier Description: The issue is related to an out-of-bounds read in LuaJit, caused by mishandled gc handler frame traversal. This can be exploited by a remote attacker to cause a denial of service. The proble...

Internet Bug Bounty: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72434 This vulnerability was discovered during the auditing of a vendor on Hackerone. Similar to our other submission on bugs.php.net and here, this vulnerability is remotely exploitable. Please feel free to ask for more technical details if necessary. Thank you fo...

Internet Bug Bounty: Use After Free Vulnerability in PHP's GC algorithm and unserialize

https://bugs.php.net/bug.php?id=72433 This vulnerability was discovered during the auditing of a vendor on Hackerone and could be successfully remotely exploited. The required conditions are a normal PHP setup with a PHP version = 5.3 and 7. Further, it is enough if the remote side uses code like...

PT-2016-4891

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue is related to the gc callback.cc file in the extensions/renderer directory, which does not prevent fallback execution once the Garbage...

gc-forever.com XSS vulnerability

Open Bug Bounty ID: OBB-147656 Description| Value ---|--- Affected Website:| gc-forever.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GC Plugin for Dropbox - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GC Plugin for Dropbox published at the 'play' market has multiple vulnerabilities...

GC - BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application GC published at the 'play' market has multiple vulnerabilities...

PT-2015-7650 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.2.7 Description: The issue allows local users to cause a denial of service via crafted keyctl commands. It is related to the key gc unused keys function in security/keys/gc.c. Recommendations: For Linux kernel...

Oracle: Security Advisory (ELSA-2013-1500)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...