kernel: Out-of-bounds heap access in xfrm

Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation...

CVE-2017-7184

Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution attacks. The vulnerability exists as the asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped durin...

Denial Of Service (DoS)

libxslt.so is vulnerable to denial of service DoS attacks. The library does not properly handle namespace nodes, allowing a malicious user to pass a file to the application to cause an out-of-bounds memory heap-access that can crash the application or execute arbitrary code...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20171019)

Security Fixes : - Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation. CVE-2017-7184, Important - A race condition...

RHEL 7 : kernel-rt (RHSA-2017:2931)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2931 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Out-of-bounds heap access in xfrm

Out-of-bounds kernel heap access vulnerability was found in xfrm, kernel's IP framework for transforming packets. An error dealing with netlink messages from an unprivileged user leads to arbitrary read/write and privilege escalation...

Information Disclosure

log4j-core is vulnerable to information disclosure. The library stores passwords as immutable strings, allowing a malicious user with access to the heap to obtain another user's password...

Out-of-bounds

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds heap access and crash or execute arbitrary code on the QEMU host via vectors involving the data transfer length...

CVE-2017-5667

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds heap access and crash or execute arbitrary code on the QEMU host via vectors involving the data transfer length...

CVE-2017-5667

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds heap access and crash or execute arbitrary code on the QEMU host via vectors involving the data transfer length...

CVE-2017-5667

The sdhcisdmatransfermultiblocks function in hw/sd/sdhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds heap access and crash or execute arbitrary code on the QEMU host via vectors involving the data transfer length...

Denial Of Service (DoS) Through Out-of-bounds Heap Access

FFMpeg is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible because the mjpegdecodeapp function allows out-of-bounds heap access through vectors relating to LJIF tags in an MJPEG file...

Denial Of Service (DoS) Through Out-of-bounds Heap Access

FFMpeg is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible through the decodeihdrchunk function which allows remote attackers to cause out-of-bounds heap access using an IDAT before an IHDR in a PNG file...

Denial Of Service (DoS) From Out-of-bounds Heap Access

FFMpeg is vulnerable to denial of service DoS attacks and other attacks. These attacks are possible because the rawdecode function allows remote attackers to cause an out-of-bounds heap access. The attacks can be performed through a .cine file that triggers the avpicturegetsize to return a negati...

Debian DLA-514-1 : libxslt security update

Several vulnerabilities were found in libxslt. CVE-2015-7995 A missing type check could cause an application crash via a especially crafted file. CVE-2016-1683 An out of bounds heap access bug was found in libxslt. CVE-2016-1684 There was an integer overflow bug in libxslt that could lead to an...

UBUNTU-CVE-2015-8778

Integer overflow in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via the size argument to the hcreater function, which triggers out-of-bounds heap-memory access...

UBUNTU-CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...