CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

CVE-2020-25602: Improper Handling of Exceptional Conditions

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Memory corruption in the application allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An allocation failure vulnerability in the function ReadMNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a small MNG file that has a MEND chunk with a large length value...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Memory corruption in the application allows an attacker to exploit the vulnerability to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This is different vulnerability from CVE-2017-11638...

Arbitrary Code Execution

gce-compute-image-packages is vulnerable to arbitrary code execution. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems, and to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges...

Arbitrary Code Execution

whoopsie is vulnerable to arbitrary code execution. An integer overflow in bsonensurespace allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

transfig is vulnerable to arbitrary code execution. A buffer underwrite vulnerability in getline in read.c allows an attacker to write prior to the beginning of the buffer via a malicious .fig file, potentially obtaining arbitrary code execution on the host OS...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. A heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference in dropsysctltable in fs/proc/procsysctl.c allows a local attacker to crash the host OS...

Arbitrary Code Execution

GPAC is vulnerable to arbitrsry code execution. A buffer overflow in the gfmediaavcreadsps function in mediatools/avparsers.c allows an attacker to execute arbitrary code on the host OS...

Arbitrry Code Execution

BusyBox is vulnerable to arbitrary code execution. A buffer overflow vulnerability in Busybox wget allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

gce-compute-image-packages is vulnerable to arbitrary code execution. The vulnerability exists through a privilege escalation flaw where a user with membership to the "docker" group is able to run docker and mount the host OS, and to modify /etc/groups to gain administrative privileges...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A memory leak in the PersistCache function in magick/pixelcache.c during writing of Magick Persistent Cache MPC files allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap overflow in the WriteCMYKImage function in coders/cmyk.c during processing of multiple frames that have non-identical widths allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...