Ubuntu 19.04 : docker-credential-helpers vulnerability (USN-4103-1)

Jasiel Spelman discovered that a double free existed in docker-credential- helpers. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-4103-2 Docker vulnerability

Jasiel Spelman discovered that a double free existed in the docker-credential- helpers dependency of Docker. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code. Original advisory details: Jasiel Spelman discovered that a double free existed in...

USN-4103-1: docker-credential-helpers vulnerability

Jasiel Spelman discovered that a double free existed in docker-credential- helpers. A local attacker could use this to cause a denial of service crash or possibly execute arbitrary code...

CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

DEBIAN-CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

UBUNTU-CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

PT-2019-5415 · Docker +1 · Docker-Credential-Helpers +1

Name of the Vulnerable Software and Affected Versions: docker-credential-helpers versions prior to 0.6.3 Description: The issue is related to a double free in the List functions, which can lead to data integrity disruption. Recommendations: For versions prior to 0.6.3, update to version 0.6.3 or...

JerryScript Buffer Overflow Vulnerability (CNVD-2019-24567)

JerryScript is a lightweight JavaScript engine . The 'litchartoutf8bytes' function in JerryScript commit version 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 jerry-core/lit/lit -char-helpers.c file is vulnerable to a buffer overflow. The vulnerability stems from a networked system or product performi...

CVE-2019-7443

KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes thi...

Design/Logic Flaw

KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes thi...

CVE-2019-7443

KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes thi...

Updated kauth packages fix security vulnerability

KAuth allows to pass parameters with arbitrary types to helpers running as root over DBus. Certain types can cause crashes and trigger decoding arbitrary images with dynamically loaded plugins...

PT-2019-18616 · Kde +3 · Kde Kauth +3

Name of the Vulnerable Software and Affected Versions: KDE KAuth versions prior to 5.55 Description: The issue allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. This can cause crashes and trigger the decoding of arbitrary images wi...

kf5-kauth -- Insecure handling of arguments in helpers

Albert Astals Cid reports: KAuth allows to pass parameters with arbitrary types to helpers running as root over DBus. Certain types can cause crashes and trigger decoding arbitrary images with dynamically loaded plugin...

PYSEC-2018-54

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

glusterfs: Information Exposure in posix_get_file_contents function in posix-helpers.c

An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file...

Virtuozzo 7 : readykernel-patch (VZA-2018-024)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - It was discovered that nfnlcthelperlist structure was accessible to any user with CAPNETADMIN capability in a networ...