Kernel update: Virtuozzo ReadyKernel patch 81.0 for Virtuozzo 7.0.9 to 7.0.10 HF1 as well as Virtuozzo Infrastructure Platform 2.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-862.20.2.vz7.73.29 Virtuozzo 7.0.9 and Virtuozzo Infrastructure Platform 2.5, 3.10.0-957.10.1.vz7.85.17 Virtuozzo 7.0.10, and 3.10.0-957.12.2.vz7.86.2 Virtuozzo 7.0.10 HF1...

CVE-2019-0988

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Important kernel security update: Virtuozzo ReadyKernel patch 81.0 for Virtuozzo 7.0 Update 9 and Virtuozzo Infrastructure Platform 2.5

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernels 3.10.0-693.11.6.vz7.40.4 Virtuozzo 7.0.6 HF3, 3.10.0-693.17.1.vz7.43.10 Virtuozzo 7.0.7, 3.10.0-693.21.1.vz7.46.7 Virtuozzo 7.0.7 HF2, 3.10.0-693.21.1.vz7.48.2 Virtuozzo 7.0....

Mozilla Firefox and Mozilla Firefox ESR XMLHttpRequest Memory Misreference Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67 and...

PT-2019-6221

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 watchOS versions prior to 5.2.1 Description A use-after-free issue was addressed with improved memory management. This issue allows a malicious...

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could u...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A race condition leading to a use-after-free flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled the addition of fragments to the LRU Last-Recently Used list under certai...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service A use-after-free flaw was found in the Linux kernel's memory management subsystem in the way quota handling for huge pages was performed. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their...

The vulnerability of the TIFFFdOpen function in the LibTIFF library, related to a memory management error, allows attackers to cause a service failure.

The vulnerability of the TIFFFdOpen function in the LibTIFF library is related to a resource management error that leads to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to cause service failures...

PYSEC-2019-232

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

SUSE-SU-2019:0948-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. - CVE-2019-3886: Fixed an...

NVIDIA Jetson TX2 Code Issue Vulnerability

NVIDIA Jetson TX2 is an embedded system development module from NVIDIA. The NVIDIA Jetson TX2 suffers from a code issue vulnerability that arises from a failure of the ARM System Memory Management Unit to properly check for errors, which can be exploited by an attacker to cause a denial of servic...

The vulnerability of Xen hypervisors arises from the unsafe combination of small IOMMUs with larger ones, allowing attackers to increase their privileges.

The vulnerability of Xen hypervisors relates to the insecure combination of small IOMMUs with larger ones. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

CVE-2019-5673

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver on all versions prior to R28.3 where the ARM System Memory Management Unit SMMU improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service...

PT-2019-5440 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat and Reader versions 2019.010.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30127 and earlier Adobe Acrobat and Reader versions 2015.006.30482 and earlier Description: The issue is related to a use-after-free...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:0553-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues fixed: libxl: save...

The vulnerability of the Libarchive library for working with archives, related to memory management after deallocation, allows an attacker to trigger a service failure.

The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to a bug in the RAR format decoder. Exploiting this vulnerability may allow an attacker to cause service interruptions...

CVE-2018-4347

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7...