Design/Logic Flaw

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser Window Python" option, Ghidra will try to execute the cmd.exe...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

Unspecified Vulnerability in Oracle GraalVM Enterprise Edition (CNVD-2019-45395)

Oracle GraalVM Enterprise Edition is a multilingual virtual machine based on Oracle's Enterprise Java SE. A security vulnerability exists in the LLVM Interpreter component in Oracle GraalVM Enterprise Edition 19.2.0. An attacker could exploit this vulnerability to affect availability...

PT-2019-15244

Name of the Vulnerable Software and Affected Versions NSA Ghidra versions prior to 9.0.5 Description The issue arises when NSA Ghidra is executed from a specific path, causing the Java process working directory to be set to that path. Upon launching the Python interpreter via the "Ghidra...

CVE-2019-2986: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-17664: Untrusted Search Path

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser Window Python" option, Ghidra will try to execute the cmd.exe...

PT-2019-3665

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition version 19.2.0 Description The issue is related to insufficient access control in the LLVM Interpreter component of Oracle GraalVM Enterprise Edition, allowing a low-privileged attacker with network access via...

Oracle GraalVM Enterprise Edition CVE-2019-2986 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocol. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.2.0 Technologies Affected Orac...

CVE-2017-0898

A buffer underflow was found in ruby's sprintf function. An attacker, with ability to control its format string parameter, could send a specially crafted string that would disclose heap memory or crash the interpreter...

The vulnerability of the Ruby interpreter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the Ruby interpreter is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

[SECURITY] Fedora 31 Update: ghostscript-9.27-1.fc31

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

Debian: Security Advisory (DLA-1915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4518-1 : ghostscript - security update

It was discovered that various procedures in Ghostscript, the GPL PostScript/PDF interpreter, do not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox. C Tenable Network Security, Inc. The descriptive text and package checks in this...

zsh security update

CentOS Errata and Security Advisory CESA-2019:2017 An update for zsh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

USN-4111-1 ghostscript vulnerabilities

Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when ‘-dSAFER’ restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access...

USN-4111-1: Ghostscript vulnerabilities

Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when ‘-dSAFER’ restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access...

Ubuntu 16.04 LTS / 18.04 LTS : Ghostscript vulnerabilities (USN-4111-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4111-1 advisory. Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when -dSAFER restrictions were...

Ubuntu: Security Advisory (USN-4111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...