CVE-2019-20063

hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...

CVE-2019-20063: Improper Initialization

hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...

PT-2019-16073

Name of the Vulnerable Software and Affected Versions libmysofa version prior to 0.8 Description The issue is related to an uninitialized use of memory in the hdf/dataobject.c file of libmysofa. This is demonstrated by the mysofa2json tool. Recommendations For versions prior to 0.8, update to...

WS-2019-0558

Poppler before 0.83.0 is vulnerable to uninitialized memory use in JBIG2Stream::readTextRegionSeg...

CVE-2019-11478 SACK can cause extensive memory use via fragmented resend queue

Jonathan Looney discovered that the TCP retransmission queue implementation in tcpfragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment SACK sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

CVE-2019-11459: Improper Check for Unusual or Exceptional Conditions

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

openSUSE Security Update : wireshark (openSUSE-2019-399)

This update for wireshark fixes the following issues : Minor vulnerabilities that could be used to trigger dissector crashes or cause excessive memory use by making Wireshark read specially crafted packages from the network or capture files boo1094301 : - CVE-2018-11356: DNS dissector crash -...

SUSE SLES12 Security Update : php5 (SUSE-SU-2015:0868-1)

PHP was updated to fix ten security issues. The following vulnerabilities were fixed : - CVE-2014-9709: A specially crafted GIF file could cause a buffer read overflow in php-gd bnc923946 - CVE-2015-2301: Memory was use after it was freed in PHAR bnc922022 - CVE-2015-2305: heap overflow...

Chrome Now Features Site Isolation to Defend Against Spectre

Google introduced new security mitigations for its Chrome browser to defend against recently discovered Spectre variants. The new security feature, called site isolation, essentially isolates different browser work processes between various browser tabs. That means one tab’s webpage rendering and...

openSUSE Security Update : wireshark (openSUSE-2018-520)

This update for wireshark fixes the following issues : Minor vulnerabilities that could be used to trigger dissector crashes or cause excessive memory use by making Wireshark read specially crafted packages from the network or capture files boo1094301 : - CVE-2018-11356: DNS dissector crash -...

CVE-2018-10827

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:2542-1) (Optionsbleed)

This update for apache2 fixes the following security issue : - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS bsc1058058. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

The vulnerability of the WLAN driver of the Android operating system from the CAF repository, which allows a hacker to trigger a memory access after it is freed

The vulnerability of the WLAN driver for the Android operating system, found in the CAF repository, is caused by synchronization errors when using a shared resource during gameplay. Exploiting this vulnerability allows a remote attacker to access memory after it has been freed...

The vulnerability of the SQLite component in Mac OS X and iOS operating systems allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the SQLite component in Mac OS X and iOS operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure application termination by using a specially crafted SQL quer...

VBScript CRegExp::Execute Uninitialized Memory Use

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the fifth entry in that series. The below information is available in more detail on my blog at http://blog.skylined.nl/20161107001.html. There you can find a repro th...

PT-2016-2921 · Openbsd +4 · Openssh +4

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 6.x through 7.3 Description: The issue allows remote attackers to cause a denial of service by sending many duplicate KEXINIT requests, leading to memory consumption. This is related to the kex input kexinit function in kex.c...

PT-2016-2773 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code using unknown vectors. Recommendations: A...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to the use of memory after its release use-after-free error when working with the TextRange object. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code or cause service failures through...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to the use of memory after its release use-after-free error when working with the CMarkup object. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code or cause service failures through a...