FreeBSD -- Memory disclosure by stale virtual memory mapping

Problem Description: A particular case of memory sharing is mishandled in the virtual memory system. It is possible and legal to establish a relationship where multiple descendant processes share a mapping which shadows memory of an ancestor process. In this scenario, when one process modifies...

Information Disclosure

apache arrow is vulnerable to information disclosure. In certain cases, arrays with null values could be built using uninitialized memory for their data segment, resulting in unintentional memory being shared over the wire...

improper bug check in x86 log-dirty handling

ISSUE DESCRIPTION Memory sharing, available to x86 HVM guests only, uses a special value in the global machine to physical address translation table M2P. PV guests have full control over M2P entries corresponding to pages they own. A bug check specifically, an assertion that an M2P entry is not t...

CVE-2016-10237

CVE-2016-10237 concerns Android/CAF Linux kernel handling of shared content protection memory, passed as the secure camera memory buffer to a trusted application (TA). The description indicates the TA would not detect the issue and would treat the shared memory as secure, reflecting a mislabeling...

UBUNTU-CVE-2015-8994

An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/modphp or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validatepermission=1 setting. The vulnerability details a...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

The use of this method after being released in the SDP dissector in Wireshark allows remote attackers to trigger a service failure abnormal termination of the application’s operation using a specially crafted packet. This packet utilizes the shared memory capabilities of both SDP and RTP dissecto...

DEBIAN-CVE-2015-8550

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service host OS crash or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability...

Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

CVE-2009-1806 concerns IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, where the issue arises when Active Memory Sharing is used. The connected documents describe the vulnerability as related to a shared memory partition and a shared memory pool with redundant paging within VIOS partit...

CVE-2009-1806: Undefined Security Weakness

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...