openSUSE Security Update : ImageMagick (openSUSE-2018-145)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...

Memory corruption

Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...

CVE-2017-12467

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...

CVE-2017-12467

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption by leveraging failure to allocate memory for the comp or complen structure member...

CVE-2017-12463

Memory leak in the ccnlappRX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service memory consumption via vectors involving an envelopes structure pointer when the packet format is unknown...

Low: git

Issue Overview: Mishandling layers of tree objects Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected...

Virtuozzo 7 : readykernel-patch (VZA-2018-007)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - It was found that release operation for the loop devices had insufficient protection for the device structures again...

CVE-2017-1000411

OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expired' flows take up the memory resource of CONFIG DATASTORE which leads to CONTROLLER shutdown. If multiple different flows with 'idle-timeout' and...

Oracle Linux 7 : kernel (ELSA-2018-0151)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0151 advisory. - powerpc spinlock: add gmb memory barrier Jon Masters 1519788 1519786 CVE-2017-5753 - powerpc Prevent Meltdown attack with L1-D$ flush Jon Masters...

Design/Logic Flaw

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

DEBIAN-CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

CVE-2018-5748 affects libvirt and its QEMU monitoring path (qemu/qemu_monitor.c). A large QEMU reply can trigger memory exhaustion, enabling a denial-of-service. Connected documents also note an incomplete fix for CVE-2018-5748 that may be triggered via the QEMU guest agent (CVE-2018-1064). Vulne...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2018-5748

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

CVE-2017-1000411

Multiple "expired" flows consume memory resources of CONFIG DS which leads to Controller shutdown...

Fedora 27 : git (2017-2c7ddf53d3)

Previous versions of git mishandled layers of tree objects, which allowed remote attackers to cause a denial of service memory consumption via a crafted repository, aka a git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attem...