EulerOS Virtualization for ARM 64 3.0.5.0 : elfutils (EulerOS-SA-2020-1055)

According to the versions of the elfutils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through...

Updated advancecomp packages fix security vulnerability

Updated advancecomp package fixes security vulnerability: An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Servic...

NewStart CGSL CORE 5.05 / MAIN 5.05 : elfutils Multiple Vulnerabilities (NS-SA-2019-0258)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has elfutils packages installed that are affected by multiple vulnerabilities: - dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

UBUNTU-CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

UPX 3.95 contains an invalid memory address dereference in canUnpack (p_mach.cpp) when processing crafted Mach-O files, leading to a crash/denial of service. Multiple advisories note this CVE-2019-20053 and show that fixes were released in UPX 3.96 (and backported updates in related advisories). ...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

UBUNTU-CVE-2019-20022

An invalid memory address dereference was discovered in loadpnm in frompnm.c in libsixel before 1.8.3...

Design/Logic Flaw

An invalid memory address dereference was discovered in loadpnm in frompnm.c in libsixel before 1.8.3...

CVE-2019-20022

CVE-2019-20022 is an invalid memory address dereference in/libsixel's load_pnm (frompnm.c) prior to 1.8.3. Red Hat documents the same description; Nessus notes unpatched status for some Linux distros. Mitigation per sources: upgrade to libsixel 1.8.3+ or later. Some PTSecurity entries discuss rel...

CVE-2019-5282

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182C00E82R1P21, Versions earlier than Emily-TL00B 9.0.0.182C01E82R1P21, Versions earlier than Emily-L09C 9.0.0.203C432E7R1P11, Versions earlier than Emily-L29C 9.0.0.203C432E7R1P11, Versions earlier than...

Double free

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182C00E82R1P21, Versions earlier than Emily-TL00B 9.0.0.182C01E82R1P21, Versions earlier than Emily-L09C 9.0.0.203C432E7R1P11, Versions earlier than Emily-L29C 9.0.0.203C432E7R1P11, Versions earlier than...

CVE-2019-5282

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182C00E82R1P21, Versions earlier than Emily-TL00B 9.0.0.182C01E82R1P21, Versions earlier than Emily-L09C 9.0.0.203C432E7R1P11, Versions earlier than Emily-L29C 9.0.0.203C432E7R1P11, Versions earlier than...

EulerOS 2.0 SP8 : elfutils (EulerOS-SA-2019-2102)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability...

The vulnerability of the Linux operating system’s kernel, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information by emulating instructions such as VMXON, VMCLEAR, VMPTRLD, and VMWRITE with a memory address as an...

Amazon Linux 2 : mercurial (ALAS-2019-1328)

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...