CVE-2018-16429

CVE-2018-16429 is an out-of-bounds read in GNOME GLib 2.56.1, affecting g_markup_parse_context_parse() in gmarkup.c via utf8_str(). The description indicates this can cause a crash (and, per CVSS, partial availability impact with high availability impact in the 3.0 vector). Affected product detai...

CVE-2018-16428

In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference...

CVE-2018-16429

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str...

Demarshalling With Improper Bounds Check

libspice-client-glib-2.0.so, libspice-client-gtk-2.0.so, libspice-client-gtk-3.0.so are vulnerable to demarshalling with improper bounds check. The vulnerability exists due to the lack of check where demarshalling could happen at an item position beyond the message end, leading to a denial of...

UBUNTU-CVE-2018-16428

In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference...

CVE-2018-16429

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str...

UBUNTU-CVE-2018-16429

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str...

glib/fuzz_variant_text: Use-of-uninitialized-value in token_stream_prepare

Detailed report: https://oss-fuzz.com/testcase?key=5190924467437568 Project: glib Fuzzer: libFuzzerglibfuzzvarianttext Fuzz target binary: fuzzvarianttext Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tokenstreamprepare...

glib/fuzz_variant_binary: Use-of-uninitialized-value in gvs_tuple_is_normal

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5995691548606464 Project: glib Fuzzer: libFuzzerglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

glib/fuzz_variant_binary: Heap-buffer-overflow in g_variant_serialiser_is_string

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=6508931483435008 Project: glib Fuzzer: aflglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

glib/fuzz_dbus_message: Use-of-uninitialized-value in g_dbus_message_new_from_blob

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5649572817797120 Project: glib Fuzzer: libFuzzerglibfuzzdbusmessage Fuzz target binary: fuzzdbusmessage Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

glib/fuzz_variant_binary: Heap-buffer-overflow in gvs_read_unaligned_le

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=4921410706210816 Project: glib Fuzzer: aflglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

glib/fuzz_variant_text: Heap-buffer-overflow in token_stream_prepare

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=6042691107291136 Project: glib Fuzzer: libFuzzerglibfuzzvarianttext Fuzz target binary: fuzzvarianttext Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

glib/fuzz_variant_text: Heap-buffer-overflow in token_stream_prepare

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5966373363646464 Project: glib Fuzzer: libFuzzerglibfuzzvarianttext Fuzz target binary: fuzzvarianttext Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

glib/fuzz_variant_binary: Crash in __msan_memcpy.part.51

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=4797154685091840 Project: glib Fuzzer: libFuzzerglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: libfuzzermsanglib Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

glib/fuzz_bookmark: Heap-buffer-overflow in fuzz_bookmark.c

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5131520774766592 Project: glib Fuzzer: libFuzzerglibfuzzbookmark Fuzz target binary: fuzzbookmark Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

glib/fuzz_markup: Heap-buffer-overflow in fuzz_markup.c

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=4818618314391552 Project: glib Fuzzer: aflglibfuzzmarkup Fuzz target binary: fuzzmarkup Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000014...

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...

QEMU Guest Agent 2.12.50 - Denial of Service Vulnerability

Exploit for linux platform in category dos / poc Exploit Title: QEMU Guest Agent 2.12.50 - Denial of Service Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.qemu.org/ Software Link: https://www.qemu.org/download/ Version: 2.12.50 and earlier Tested on: 2.12.50 CVE :...

Satellite Tracking Application: Gpredict

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...