4046 matches found
SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2016:2053-1)
This update for libvirt fixes one security issue : - CVE-2016-5008: Empty VNC password disables authentication. bsc987527 Additionally, the update includes the following non-security fixes : - Improve waiting for block job readines in virsh. bsc989755 - Parse negative values in augeas lenses...
Internet Bug Bounty: stack buffer overflows in the curses module
I found two stack buffer overflows in the curses module. These vulnerabilities have been reported to the PSRT and were fixed here: https://hg.python.org/cpython/rev/d5f6bc45b376 https://hg.python.org/cpython/rev/85b35300f200 Below are copies of the mails I sent to the PSRT. They describe the...
The vulnerability of the Cairo vector graphics library, which allows a hacker to cause a service failure
The vulnerability of the fillxrgb32lerpopaquespans function in the Cairo vector graphics library is due to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure such as out-of-memory reading or application termination by setting the length of the interv...
OpenSSL 1.0.1 < 1.0.1o / 1.0.2 < 1.0.2c ASN.1 Encoder Negative Zero Value Handling RCE
Binary data 9389.prm...
The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack.
The vulnerability of the Firefox browser in the OMTC component lies in the use of the memset function for a memory area with a negative length value when interacting with the mozilla::layers::BufferTextureClient::AllocateForSurface function. Exploiting this vulnerability allows a malicious actor ...
The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.
The vulnerability of Wireshark’s dissectframe function, located in the epan/dissectors/packet-frame.c file, stems from the use of negative integers as packet length values. Exploiting this vulnerability allows a remote attacker to cause a service failure abrupt termination of the application by...
DEBIAN-CVE-2016-4957
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service daemon crash via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547...
The vulnerability of the enterprise automation system 1C:Enterprise allows a malicious individual to trigger service failures or execute arbitrary codes.
The automation system of the enterprise 1C:Enterprise contains a vulnerability in the Fast Infoset decoder of the XML document handling library xml2.dll. A malicious individual, by manipulating input data, can set the Fast Infoset decoder to the CIIUTF8LARGELENGTH state for processing a single...
Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04340)
Pidgin is a cross-platform real-time communication client. A buffer overflow vulnerability exists in the MXIT protocol processing in Pidgin version 2.10.11, which can be exploited by an attacker to cause a buffer overflow and memory corruption with the help of a negative length value...
Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04347)
Pidgin is a cross-platform real-time communication client that supports several popular real-time communication protocols. A buffer overflow vulnerability exists in Pidgin's MXIT protocol processing, which allows remote attackers to exploit the vulnerability to send a negative-length HTTP respons...
Pidgin MXIT Protocol Buffer Overflow Vulnerability
Pidgin is a cross-platform real-time communication client that supports several commonly used real-time communication protocols and allows users to log into different real-time communication services with the same software. A buffer overflow vulnerability exists in the MXIT protocol processing of...
UBUNTU-CVE-2016-2377
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the...
UBUNTU-CVE-2016-2378
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the server could potentially result in a buffer overflow, potentially resulting in memory corruption. A malicious server or an unfiltered malicious user can send negative length...
Adobe DNG Software Development Kit Memory Corruption Vulnerability
Adobe DNG Software Development Kit SDK is the United States of America Ordoby Adobe company's set of software development tools for reading and writing DNG files as well as converting DNG data format. A security vulnerability exists in Adobe DNG SDK 1.4 2012 release and earlier versions for Windo...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the graphemestrpos function ext/intl/grapheme/graphemestring.c in the PHP interpreter exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability may allow an attacker to cause a service failure reading beyond the memory limit, or it may have...
ntp: crypto-NAK preemptable association denial of service
A denial of service flaw was found in the way NTP handled preemptable client associations. A remote attacker could send several crypto NAK packets to a victim client, each with a spoofed source address of an existing associated peer, preventing that client from synchronizing its time...
General Purpose Fuzzer: Radamsa
Radamsa is a test case generator for robustness testing, a.k.a. a fuzzer. It is typically used to test how well a program can withstand malformed and potentially malicious inputs. It works by reading sample files of valid data and generating interestringly different outputs from them. The main...
CVE-2016-1887
Integer signedness error in the sockargs function in sys/kern/uipcsyscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service memory overwrite and kernel panic or gain privileges via a negative buflen argument, which triggers a...
CVE-2016-4537
The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call...
