8390 matches found
PT-2018-1287 · Igor Pavlov · 7-Zip
Name of the Vulnerable Software and Affected Versions: 7-Zip versions prior to 18.02 Description: The issue is related to the implementation of the "Large memory pages" option in 7-Zip, which uses the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
Buffer overflow
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
PYSEC-2018-148
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
[slackware-security] ruby
New ruby packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ruby-2.2.10-i586-1slack14.2.txz: Upgraded. This release includes some bug fixes and some security fixes: HTTP response splitting in...
mysql: sha256_password authentication DoS via hash with large rounds value
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
CVE-2018-8945
The bfdsectionfromshdr function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service segmentation fault via a large attribute section...
CVE-2018-8945
The bfdsectionfromshdr function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service segmentation fault via a large attribute section...
DEBIAN-CVE-2018-8945
The bfdsectionfromshdr function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service segmentation fault via a large attribute section...
CVE-2018-8945
The bfdsectionfromshdr function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service segmentation fault via a large attribute section...
CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
DEBIAN-CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
Stack overflow
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
UBUNTU-CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
CVE-2018-8882
Netwide Assembler NASM 2.13.02rc2 has a stack-based buffer under-read in the function ieeeshr in asm/float.c via a large shift value...
dhcp: Reference count overflow in dhcpd allows denial of service
A denial of service flaw was found in the way dhcpd handled reference counting when processing client requests. A malicious DHCP client could use this flaw to trigger a reference count overflow on the server side, potentially causing dhcpd to crash, by sending large amounts of traffic...