6080 matches found
FFmpeg sws_init_context Denial of Service Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'swsinitcontext' function in the libswscale/utils.c file in versions of FFmpeg prior to 2.7.2, which stems from the program's failure to initialize th...
DEBIAN-CVE-2015-6825
The ffframethreadinit function in libavcodec/pthreadframe.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via a crafted file, as demonstrated by an A...
PT-2015-7376
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2 Description The issue is related to the sws init context function in libswscale/utils.c, which does not properly initialize certain pixbuf data structures. This can be exploited by remote attackers using crafted...
CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafte...
Linux/x86 - execve /bin/sh shellcode 21 bytes 2
Linux/x86 - execve /bin/sh shellcode 21 bytes 2. Shellcode exploit for linx86 platform Linux/x86 - Shutdowninit 0 - 30 bytes Greetz : BombermanLeader Author : B3mB4m 08048060 : 8048060: 31 c0 8048062: 50 8048063: 68 68 61 6c 74 push $0x746c6168 8048068: 68 69 6e 2f 2f push $0x2f2f6e69 804806d: ...
PT-2015-6598
Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue concerns the chmd init decomp function in chmd.c, which does not properly validate the reset interval. This allows remote attackers to cause a denial of service, resulting in a divide-by-ze...
kernel: net: slab corruption from use after free on INIT collisions
A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system...
kernel: net: slab corruption from use after free on INIT collisions
A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system...
IPsec-Tools IKE Daemon Remote Denial of Service Vulnerability
IPsec-Tools is a user-space implementation of different IPSecs ported from KAME's libipsec, setkey and racoon, and supports various BSD systems. A null pointer reference error in the IPsec-Tools 'gssapiinit' function src/racoon/gssapi.c allows a remote attacker to submit special UDP packets that...
Moderate: Red Hat Security Advisory: tomcat6 security and bug fix update
Updated tomcat6 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Vulnerabilities of the SUSE Linux Enterprise operating system, which allow a malicious individual to compromise the integrity of protected information
The multiple vulnerabilities in the module-init-tools package of the SUSE Linux Enterprise operating system can lead to a violation of the integrity of protected information. These vulnerabilities can be exploited locally...
Vulnerabilities of the SUSE Linux Enterprise operating system, which allow a malicious individual to compromise the integrity of protected information
The module-init-tools-debugsource package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited locally...
Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the integrity of protected information
The module-init-tools package of the openSUSE operating system has multiple vulnerabilities that, if exploited, could lead to the compromise of protected information. Exploitation of these vulnerabilities can be carried out locally...
Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the integrity of protected information
The module-init-tools-debuginfo package of the operating system openSUSE has multiple vulnerabilities. Exploiting these vulnerabilities can lead to a breach of the integrity of protected information. These vulnerabilities can be exploited locally...
Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the integrity of protected information
The module-init-tools-debugsource package of the openSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a breach of the integrity of protected information. These vulnerabilities can be exploited locally...
Vulnerabilities of the SUSE Linux Enterprise operating system, which allow a malicious individual to compromise the integrity of protected information
The module-init-tools-debuginfo package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited locally...
kernel: net: slab corruption from use after free on INIT collisions
A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system...
Mashshare <= 2.3.0 - Information Disclosure
The Mashshare plugin exposes a few AJAX commands via its own custom hook, which can be found in the file ‘includes/admin/admin-actions.php’, and the function ‘mashsbprocessactions’. This function is called upon the ‘admininit’ action being fired, which can be triggered by anyone when visiting the...
Updated glusterfs packages fix security vulnerabilities
Updated glusterfs packages fix security vulnerability: glusterfs was vulnerable to a fragment header infinite loop denial of service attack CVE-2014-3619. Also, the glusterfsd SysV init script was failing to properly start the service. This was fixed by replacing it with systemd unit files for th...
Linux Australia Breached by Hackers
Linux Australia, a consortium in charge of organizing Linux conferences Down Under, acknowledged over the weekend it was breached by attackers who were able to secure access to one of its servers, and with it, potential user information. In a detailed email to users on Saturday, the group’s...