RHEL 7 : liblouis (RHSA-2017:3111)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3111 advisory. Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and...

liblouis: Illegal address access in the _lou_getALine() function

There is an illegal address access in the function lougetALine in compileTranslationTable.c:343 in Liblouis 3.2.0...

liblouis: Illegal address access in the _lou_getALine function

Multiple flaws were found in the processing of translation tables in liblouis. An attacker could crash or potentially execute arbitrary code using malicious translation tables...

Updated exiv2 packages fix security vulnerabilities & bugs

Opening an image created on certain pentax cameras with gwenview, which uses the exiv2 library, causes gwenview to segfault. Exiv2 upstream created a patch to resolve this problem bugfix - applies only to mga6. The following security issues were also fixed: Heap overflow in...

Japanese Subaru car, was traced to the presence of flaws vulnerability bug, able to clone the key to open the door electronic key-vulnerability warning-the black bar safety net

Recently, a man named Tom Wimmenhove the Dutch electronics industry Planner at multi Subaru car key system of the invention a serious Network Security Plan drawbacks, manufacturers today have yet to fix this vulnerability flaws bug, but the vulnerability flaws of the bug will incur Subaru car is...

FreeBSD : ncurses -- multiple issues (b84dbd94-e894-4c91-b8cd-d328537b1b2b)

ncurses developers reports : There are multiple illegal address access issues and an infinite loop issue. Please refer to the CVE list for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

World’s largest child porn site was run by police for undercover op

By Carolina Dark web is home to explicit and illegal content including child This is a post from HackRead.com Read the original post: Worlds largest child porn site was run by police for undercover op...

Dark-Web Drug Dealer Arrested After He Travelled US for World Beard Championships

United States authorities arrested suspected dark web drug kingpin late last month while he was travelling from his base in France to the United States of America for this year’s annual World Beard and Mustache Championships. Gal Vallerius, a 38-year-old French national, was travelling to Austin,...

SUSE SLED12 / SLES12 Security Update : liblouis (SUSE-SU-2017:2570-1)

This update for liblouis fixes several issues. These security issues were fixed : - CVE-2017-13738: Prevent illegal address access in the lougetALine function that allowed to cause remote DoS bsc1056105. - CVE-2017-13739: Prevent heap-based buffer overflow in the function resolveSubtable that cou...

SUSE-SU-2017:2570-1 Security update for liblouis

This update for liblouis fixes several issues. These security issues were fixed: - CVE-2017-13738: Prevent illegal address access in the lougetALine function that allowed to cause remote DoS bsc1056105. - CVE-2017-13739: Prevent heap-based buffer overflow in the function resolveSubtable that coul...

sam2p file write vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A file write vulnerability exists in sam2p version 0.49.3. An attacker can exploit this vulnerability to write to an illegal address...

CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

Code injection

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

UBUNTU-CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14575

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c."...

CVE-2017-14567

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b."...

CVE-2017-14561

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638."...

CVE-2017-14573

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a."...

Pirate Bay Spotted Hosting Monero Cryptocurrency Miner

A cryptocurrency miner surfaced on the world’s largest torrenting site for a day over the weekend, raising the ire of users unaware the tool was there, let alone leveraging their machine’s computing power. Users noticed the miner Friday night on The Pirate Bay, a site that acts as a treasure trov...

Null pointer dereference

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service...