3575 matches found
CVE-2019-0010
An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...
CVE-2019-0010
Summary: CVE-2019-0010 affects Juniper SRX Series with Junos OS UTM enabled. Crafted HTTP traffic can exhaust mbufs in SPU/JMPI, causing a system crash (DoS) and failover. The issue is observed when HTTP AV inspection is enabled; WEB Filtering alone is unaffected. Affected products/versions (per ...
CVE-2019-0010: Allocation of Resources Without Limits or Throttling
An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...
CVE-2018-20548: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 1bpp data...
The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer in memory, allowing a malicious actor to execute arbitrary code in the context of the current user.
The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...
The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.
The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...
CVE-2018-20549: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is an illegal WRITE memory access at caca/file.c function cacafileread in libcaca 0.99.beta19...
The vulnerability of the CAacDecoder_Init function in the Android operating system allows a hacker to execute arbitrary code.
The vulnerability of the CAacDecoderInit function aacdecoder.cpp in the Android operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Qualcomm operating system Android component, which allows a hacker to trigger a buffer overflow in memory
The vulnerability of the Qualcomm Android operating system is related to array indexing errors. Exploiting this vulnerability can allow attackers to cause buffer overflows in memory by using malicious XML data in the firehose directory...
The vulnerability of the Rgui graphical interface, related to buffer overflow in memory, allows an attacker to execute arbitrary code.
The vulnerability of the Rgui graphical interface is related to buffer overflow in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted localization file...
CVE-2018-18959: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longe...
CVE-2018-20359: Improper Restriction of Operations within the Bounds of a Memory Buffer
An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
The vulnerability of the list.c file in the Info-ZIP UnZip compressor allows a hacker to execute arbitrary code.
The vulnerability of the list.c file in the Info-ZIP UnZip compressor arises due to an overflow in the memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2018-11961: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...
The vulnerability of the Qemu hardware emulation’s load_multiboot function, related to writing beyond the buffer boundaries of memory, allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the loadmultiboot function in the hw/i386/multiboot.c file of the Qemu hardware emulation driver is related to an error that causes writing outside the allocated memory buffer during multi-boot operations. Exploiting this vulnerability allows a attacker to execute arbitrary...
CVE-2018-19036: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...
The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the Media framework component of the Android operating system allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the Media framework component of the Android operating system relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...
The vulnerability of the Qualcomm Video component of the Android operating system allows a hacker to execute arbitrary code.
The vulnerability of Qualcomm Video component in the Android operating system is caused by an overflow in the memory buffer. Exploiting this vulnerability can allow a hacker to execute arbitrary code...