CVE-2020-15593

SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...

CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

Code injection

SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...

CVE-2020-15593

CVE-2020-15592/15593 (SteelCentral Aternity Agent 11.0.0.120, Windows) : The NVD entries describe a privilege-escalation and code-execution risk due to insecure inter-process communication. An IPC channel (AternityAgentAssistantIpc) allows any system user to retrieve a serialized object and remot...

CVE-2020-15593

SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...

CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

CVE-2020-15592

SteelCentral Aternity Agent (Windows) is affected by CVE-2020-15592/15593 prior to version 11.0.0.120. The root cause is a directory traversal flaw in the plugin loading path used by inter-process communication (AternityAgentAssistantIpc): the DLL name is concatenated with a “.\plugins” string, a...

CVE-2020-15593: Undefined Security Weakness

SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...

PT-2020-14518

Name of the Vulnerable Software and Affected Versions SteelCentral Aternity Agent version 11.0.0.120 Description The issue concerns the mishandling of Inter-Process Communication IPC by the SteelCentral Aternity Agent. It allows any user on the system to access the interprocess communication...

CVE-2020-15592: Improper Limitation of a Pathname to a Restricted Directory

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

OSV-2020-1159 Segv on unknown address in arrow::ipc::ReadMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20124 Crash type: Segv on unknown address Crash state: arrow::ipc::ReadMessage arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadMessageFromBlo...

OSV-2020-1058 Heap-buffer-overflow in arrow::UnionType::UnionType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20116 Crash type: Heap-buffer-overflow WRITE 4 Crash state: arrow::UnionType::UnionType arrow::union arrow::ipc::internal::ConcreteTypeFromFlatbuffer...

OSV-2020-1047 UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20123 Crash type: UNKNOWN READ Crash state: arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::GetSchema...

PT-2020-21737

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a segmentation fault on an unknown address. The crash occurs in the ReadMessage function of...

PT-2020-21678

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write error. Technical details include a crash type of Heap-buffer-overflow WRITE 4, and the crash state...

PT-2020-21670

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves functions such as FieldFromFlatbuffer and GetSchema within the arrow::ipc::internal...

arrow:arrow-ipc-stream-fuzz: Negative-size-param in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4964779626856448 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

@amazingcat/amazing-iohook (8.2.3), @donmahallem/trapeze-client-desktop (5.1.1) +14 more potentially affected by CVE-2020-4076 via electron (>=8.0.0, <=8.2.3)

electron NPM version =8.0.0, =8.0.0, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =1.1.35, =3.1.20, =3.2.1 and more Source cves: CVE-2020-4076 Source advisory: OSV:GHSA-M93V-9QJC-3G79...

firefox security update

68.6.1-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Horak - Update to 68.6.0 build1 68.5.0-3 - Added fix for rhbz1805667 - Enabled mzbz@1170092 - Firefox prefs at /etc Fri Feb 07 2020 J...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6440533038989312 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6190000009ac...