251 matches found
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3931-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3931-1 advisory. M. Vefa Bicakci and Andy Lutomirski discovered that the kernel did not properly set up all arguments to an error handler callback used when running as a...
USN-3931-2: Linux kernel (HWE) vulnerabilities
USN-3931-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS and for the Linux Azure kernel for Ubuntu 14.04 LTS. M. Vefa Bicakci and Andy Lutomirsk...
QXmlStream Heap Buffer Overflow DoS
The vulnerability of the QXMLStreamReader function in the QXmlStream component of the cross-platform software development framework for Qt is related to double memory deallocation. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...
WebRTC DoS
The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created HTML page...
macOS < 10.14.3 / iOS < 12.1.3 XNU - vm_map_copy Optimization which Requires Atomicity isn�
/ vmmapcopyininternal in vmmap.c converts a region of a vmmap into "copied in" form, constructing a vmmapcopy structure representing the copied memory which can then be mapped into another vmmap or the same one. The function contains a while loop which walks through each of the vmmapentry...
macOS < 10.14.3 / iOS < 12.1.3 XNU - 'vm_map_copy' Optimization which Requires Atomicity isn't Atomic
/ vmmapcopyininternal in vmmap.c converts a region of a vmmap into "copied in" form, constructing a vmmapcopy structure representing the copied memory which can then be mapped into another vmmap or the same one. The function contains a while loop which walks through each of the vmmapentry...
macOS 10.14.3 iOS 12.1.3 XNU - vm_map_copy Optimization which Requires Atomicity isnt Atomic
macOS 10.14.3 iOS 12.1.3 XNU - vmmapcopy Optimization which Requires Atomicity isnt Atomic / vmmapcopyininternal in vmmap.c converts a region of a vmmap into "copied in" form, constructing a vmmapcopy structure representing the copied memory which can then be mapped into another vmmap or the same...
PT-2018-2815
Name of the Vulnerable Software and Affected Versions Linux affected versions not specified Description The issue is related to a memory deallocation error in the smsc75xx bind handler of the Linux kernel, specifically in the drivers/net/usb/smsc75xx.ko module. This error can be exploited to caus...
PT-2018-2814
Name of the Vulnerable Software and Affected Versions Linux affected versions not specified Description The issue is related to a memory deallocation error in the kalmia bind kernel handler implementation for Linux. When a Samsung Kalmia based LTE USB modem is connected, it can cause a denial of...
PT-2018-2813
Name of the Vulnerable Software and Affected Versions Linux affected versions not specified Description The issue is related to a memory deallocation error in the Linux kernel's implementation of the if cs probe handler, specifically in the libertas cs.ko driver. This error can be exploited to...
PT-2018-2854
Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ddb open handler implementation in the Astra Linux kernel, specifically in the ddbridge.ko module. The error occurs in the ddb...
Mozilla Firefox Thunderbird Memory Use After Free DoS
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after freeing resources during manipulation of ARIA elements in DOM containers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Mozilla Firefox Thunderbird Memory Use After Free DoS
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation, when changing the size of image objects in the developer mode. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Ubuntu 14.04 LTS / 16.04 LTS : Exim vulnerability (USN-3322-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3322-1 advisory. It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in...
USN-3322-1 exim4 vulnerability
It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in conjunction with a vulnerability in the underlying kernel to possibly execute arbitrary code and gain administrative privileges...
UBUNTU-CVE-2015-0808
The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service memory corruption via unspecified vectors...
CVE-2014-0701
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...
CVE-2014-0701
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...
CVE-2014-0701: Undefined Security Weakness
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...
PT-2014-1313
Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.0 through 7.0.249.0 Cisco Wireless LAN Controller WLC version 7.2 Cisco Wireless LAN Controller WLC version 7.3 Cisco Wireless LAN Controller WLC versions 7.4 through 7.4.109.0 Description The issue...