PT-2018-3380

Name of the Vulnerable Software and Affected Versions: QEMU version 3.0.0 Description: The issue is related to the lsi do msgin function in the QEMU hardware emulator, specifically in the hw/scsi/lsi53c895a.c file. It involves a buffer data boundary read issue. Exploitation of this issue could...

Buffer overflow

Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used...

CVE-2018-17962

Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used...

CVE-2018-17958

Qemu has a Buffer Overflow in rtl8139doreceive in hw/net/rtl8139.c because an incorrect integer data type is used...

CVE-2018-17962

Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used...

CVE-2018-17958

Qemu has a Buffer Overflow in rtl8139doreceive in hw/net/rtl8139.c because an incorrect integer data type is used...

CVE-2018-17958: Integer Overflow or Wraparound

Qemu has a Buffer Overflow in rtl8139doreceive in hw/net/rtl8139.c because an incorrect integer data type is used...

CVE-2018-17962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used...

CVE-2018-11278

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault...

Code injection

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault...

CVE-2018-11278

CVE-2018-11278 affects CAF Venus HW in Android for MSM, Firefox OS for MSM, and QRD Android builds. The vulnerability occurs when Venus HW decodes input bit stream buffers: it searches for a start code, and if the start code is not found in the entire buffer, the implementation may over-fetch bey...

CVE-2018-11278

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault...

CVE-2018-11278: Out-of-bounds Read

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault...

PT-2018-10447

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue arises when the Venus HW searches for a start code while decoding input bit...

PT-2019-10283

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18.7 Description: An issue was discovered in the Linux kernel where mlx5 ib create qp resp was never initialized in create qp common in drivers/infiniband/hw/mlx5/qp.c, resulting in a leak of stack memory to...

openSUSE: Security Advisory for xen (openSUSE-SU-2018:1487-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for xen (important)

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka "Memory Disambiguation" bsc1092631 This feature can be controlled by the "ssbd=on/off" commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt...

PT-2018-3511

Name of the Vulnerable Software and Affected Versions: Linux Kernel version 3.18 Description: The issue is related to a dangerous feature vulnerability in the modify user hw breakpoint function, which can lead to a crash and possibly memory corruption. This can be exploited via local code executi...

CVE-2015-9222

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

CVE-2015-9222: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...