CVE-2019-18178

Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FFClose is defined in fffile.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree, but it is reused to flush modified file content from the cache to disk by the function...

[SECURITY] Fedora 30 Update: nspr-4.23.0-1.fc30

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

[SECURITY] Fedora 31 Update: nspr-4.23.0-1.fc31

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

Low: Red Hat Enhancement Advisory: glusterfs bug fix and enhancement update

Updated glusterfs packages that fix several bugs and add various enhancements are now available. Red Hat Gluster Storage is software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies data storage and infrastructure, increases performance,...

Design/Logic Flaw

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1, and versions 9.10.7-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 of th...

CVE-2019-15256 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 1 IKEv1 feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to the reutilization of dynamic memory after it is freed by a “trash collector”. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protecte...

About the security content of tvOS 12.4.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

DEBIAN-CVE-2019-2182

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Kernel MMU Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. The Kernel MMU is one of the kernel memory unit management components. An elevation of privilege vulnerability exists in the Kernel MMU component of Android. An attacker can exploit thi...

CVE-2019-15788

Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocateblock.cpp...

CVE-2019-15788

Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocateblock.cpp...

Integer overflow

Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocateblock.cpp...

CVE-2019-15788

CVE-2019-15788 affects Clara Genomics Analysis prior to 0.2.0. The issue is an integer overflow in cudapoa memory management within allocate_block.cpp. According to the CVE description, this overflow could impact memory handling, with CVSS scores indicating a high/severe impact (CVSSv2 base score...

CVE-2019-15788

Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocateblock.cpp...

About the security content of macOS Mojave 10.14.6 Supplemental Update

About the security content of macOS Mojave 10.14.6 Supplemental Update This document describes the security content of macOS Mojave 10.14.6 Supplemental Update. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

FreeBSD-SA-19:22.mbuf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:22.mbuf Security Advisory The FreeBSD Project Topic: IPv6 remote Denial-of-Service Category: kernel Module: net Announced: 2019-08-20 Credits: Clement Lecign...

PT-2019-3067 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!

TL;DR The TP-Link M7350 V3 is affected by a pre-authentication CVE-2019-12103, and a few post-authentication CVE-2019-12104 command injection vulnerabilities. These injections can be exploited remotely, if the attacker is on the same LAN or otherwise able to get access to the router web interface...

webkitgtk: crafted web content leads to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...