CVE-2019-3564

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following multiple vulnerabilities - Multiple vulnerabilities in the handling of Inter-Access Point Protocol IAPP messages by Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacen...

CVE-2019-1796

CVE-2019-1796 affects Cisco Wireless LAN Controller (WLC) software due to improper validation of input in Inter-Access Point Protocol (IAPP) messages. An unauthenticated adjacent attacker can send malicious IAPP messages to trigger a reload of the WLC, causing a DoS. Affected software versions in...

The vulnerability of the imap_mail function in the PHP programming language allows a hacker to cause a service failure.

The vulnerability of the imapmail function in the PHP programming language is related to errors in handling empty strings in message arguments. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Using Semmle QL vulnerability out Part2-vulnerability warning-the black bar safety net

First part of this series introduced the Semmle QL, as well as the Microsoft Security Response Center MSRC how to use it to review to our report the vulnerability. This article discusses a How do we take the initiative to use it examples, including Azure firmware component of a security audit. Th...

SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:0426-1)

This update for systemd fixes the following issues : CVE-2019-6454: Overlong DBUS messages could be used to crash systemd bsc1125352 units: make sure initrd-cleanup.service terminates before switching to rootfs bsc1123333 logind: fix bad error propagation login: log session state 'closing' as wel...

SUSE-SU-2019:0426-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2019-6454: Overlong DBUS messages could be used to crash systemd bsc1125352 - units: make sure initrd-cleanup.service terminates before switching to rootfs bsc1123333 - logind: fix bad error propagation - login: log session state 'closing'...

Quagga BGP Daemon bgp_capability_msg_parse Denial-of-Service (CVE-2018-5381)

A denial-of-service vulnerability has been reported in the BGP Daemon of Quagga. The vulnerability is due to improper handling of Multiprotocol Extensions Capabilities within certain BGP messages. A remote attacker could exploit this vulnerability by sending a crafted BGP message to the target...

Description of the security update for Outlook 2016: January 8, 2019

None None...

USN-3815-1 gettext vulnerability

It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute arbitrary code...

Fedora 27 : mozilla-noscript (2018-09c51bbcec)

Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...

Security update for MozillaThunderbird (important)

This update for MozillaThunderbird to version 60.0 fixes the following issues: These security issues were fixed: - CVE-2018-12359: Prevent buffer overflow using computed size of canvas element bsc1098998. - CVE-2018-12360: Prevent use-after-free when using focus bsc1098998. - CVE-2018-12361:...

CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field...

CVE-2018-14350

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field...

UBUNTU-CVE-2017-12194

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...

CVE-2018-6534

An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which can cause the product to crash...

Cisco Unity Connection Mail Relay Vulnerability

Cisco Unity Connection UC is a voice messaging platform from Cisco USA. The platform can use voice commands to make phone calls or listen to messages in a "hands-free" manner.SMTP relay is one of the mail relay forwarding component. A security vulnerability exists in SMTP relay in Cisco UC, which...

The vulnerability in the IPC::Connection::processMessage function of UNIX IPC kernels for display pages in WebKitGTK+ allows a attacker to trigger a buffer overflow.

The vulnerability of the IPC::Connection::processMessage function in UNIX IPC kernel and WebKitGTK+ web pages is caused by improper checking of message sizes. Exploiting this vulnerability can allow a malicious actor to trigger buffer overflows in user interface processes remotely...

Code injection

An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by use of an Apple Wat...

CVE-2017-13903

An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by use of an Apple Wat...