847 matches found
The vulnerability of the pdpl_get_raw handler implementation in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the implementation of the pdplgetraw function parsec/parsec.ko in the Linux kernel relates to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure when there is a memory shortage in the system. This is because the...
Bento4 Denial of Service Vulnerability (CNVD-2019-21439)
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.5.1.0, which stems from the program failing to properly handle memory allocation failures. An attacker can exploit this vulnerability to cause a denial of service crash...
Null pointer dereference
An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...
UBUNTU-CVE-2019-13238
An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...
CVE-2019-13238
CVE-2019-13238 affects Bento4 1.5.1.0. The issue is an unhandled memory allocation failure in Core/Ap4SdpAtom.cpp that causes a direct copy to a NULL pointer while parsing an atom in the stream, leading to crashes. Related entries describe the vulnerability as an incomplete fix (Incomplete Fix CV...
SUSE-SU-2019:1733-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2018-16403: Fixed a heap-based buffer over-read that could have led to Denial of Service bsc1107067. - CVE-2016-10254: Fixed a memory allocation failure in alloxateelf bsc1030472. - CVE-2019-7665: NTPLATFORM core fi...
openSUSE Security Update : elfutils (openSUSE-2019-1590)
This update for elfutils fixes the following issues : Security issues fixed : - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure ...
OPENSUSE-SU-2019:1590-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure in...
SUSE SLED15 / SLES15 Security Update : elfutils (SUSE-SU-2019:1486-1)
This update for elfutils fixes the following issues : Security issues fixed : CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 CVE-2017-7609: Fixed a memory allocation failure in...
Linux kernel memory leak vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory disclosure vulnerability exists in coninsertunipair in drivers/tty/vt/consolemap.c in Linux kernel 5.1.5 and...
EulerOS Virtualization 3.0.1.0 : libpng (EulerOS-SA-2019-1421)
According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before...
Design/Logic Flaw
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
CVE-2019-7582
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
UBUNTU-CVE-2019-7582
The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure...
CVE-2019-7581
CVE-2019-7581 affects libming up to version 0.4.8, where the parseSWF_ACTIONRECORD function in util/parser.c can be triggered by a crafted SWF file to cause memory allocation failure (remote, impact unspecified in description). The vulnerability is described as a remote memory allocation issue wi...
CVE-2019-7582
The CVE-2019-7582 issue affects the libming project (libming 0.4.8 and earlier), specifically the readBytes function in util/read.c. A crafted SWF file can trigger a memory allocation failure, with impact described as unspecified in the provided sources. The publicly available documents do not sp...
Design/Logic Flaw
A vulnerability in the Cisco Discovery Protocol CDP module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS condition. The vulnerability is due to incorrect processing of certain C...
CVE-2018-0471 Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability
A vulnerability in the Cisco Discovery Protocol CDP module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS condition. The vulnerability is due to incorrect processing of certain C...
Security Bulletin: IBM Security Access Manager Appliance is affected by Kerberos vulnerabilities (CVE-2017-11368, CVE-2017-7562)
Summary IBM Security Access Manager Appliance has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-11368 DESCRIPTION: MIT Kerberos 5 is vulnerable to a denial of service, caused by a KDC assertion failure. By sending a specially-crafted request, a remote authenticate...