ROS-20260216-73-0015

Vulnerability in avahi related to a flaw in the use of assert. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of embedded software developed by Qualcomm, related to deficiencies in the use of the assert() function, allows attackers to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips lies in the improper implementation of the channel bandwidth division mechanism and the switching between subbands when performing Beam Switching. This occurs due to the use of the assert function. Exploiting this vulnerability c...

SUSE SLES11 Security Update : Recommended update for glibc (SUSE-SU-2018:4067-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2017-15671: Fixed memory leak in glob with GLOBTILDE bsc1064569, BZ 22325. Non-security issue fixed: Avoid access beyond memory bounds in pthreadattrgetaffinitynp bsc1110170, BZ 15618. Remove improper assert in dlclose...

SUSE-SU-2018:4067-1 Recommended update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2017-15671: Fixed memory leak in glob with GLOBTILDE bsc1064569, BZ 22325. Non-security issue fixed: - Avoid access beyond memory bounds in pthreadattrgetaffinitynp bsc1110170, BZ 15618. - Remove improper assert in...

Debian DSA-2547-1 : bind9 - improper assert

It was discovered that BIND, a DNS server, does not handle DNS records properly which approach size limits inherent to the DNS protocol. An attacker could use crafted DNS records to crash the BIND server process, leading to a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-2347-1 : bind9 - improper assert

It was discovered that BIND, a DNS server, crashes while processing certain sequences of recursive DNS queries, leading to a denial of service. Authoritative-only server configurations are not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1847-1 : bind9 - improper assert

It was discovered that the BIND DNS server terminates when processing a specially crafted dynamic DNS update. This vulnerability affects all BIND servers which serve at least one DNS zone authoritatively, as a master, even if dynamic updates are not enabled. The default Debian configuration for...