CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

Memory corruption

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-20742

UC Berkeley RISE Opaque contains a boundary-check flaw: ocall_malloc may return a pointer into enclave memory, enabling an arbitrary enclave memory write. Affected: UC Berkeley RISE Opaque (pre-2018-12-01). Root cause: missing boundary check on ocall_malloc. Impact: potential memory corruption wi...

PT-2019-10197

Name of the Vulnerable Software and Affected Versions: UC Berkeley RISE Opaque versions prior to 2018-12-01 Description: An issue was discovered where there is no boundary check on ocall malloc, which could cause an arbitrary enclave memory write due to the return value being a pointer to enclave...

CVE-2018-20742: Out-of-bounds Write

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocallmalloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write...

CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

CVE-2018-12358: Exposure of Sensitive Information to an Unauthorized Actor

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

UBUNTU-CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

Cairo _fill_xrgb32_lerp_opaque_spans Denial of Service Vulnerability

Cairo is a cross-platform open source vector graphics library , it supports in multiple contexts to do 2D drawing , and provides high-quality display and printout . A security vulnerability in fillxrgb32lerpopaquespans in Cairo allows remote attackers to submit a special request for a denial of...

Cisco IOS XR Resource Management Error Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network operating system. A security vulnerability exists in Cisco IOS XR that stems from the program not properly limiting the number of Path Computation Elements PCEs for OSPF LSA opaque...

CVE-2015-6432: Undefined Security Weakness

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

UBUNTU-CVE-2015-5122

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome...

Cisco IOS OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device contains an issue in the OSPF implementation. The flaw is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated can cause a denial of service device reload via specially crafted OSPF packets with unusual...

CVE-2013-2236

Removed by vendor...

UBUNTU-CVE-2013-2236

Stack-based buffer overflow in the newmsglsachangenotify function in the OSPFD API ospfapi.c in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service crash via a large LSA...

Cisco IOS Software OSPF Opaque LSA Denial of Service Vulnerability

A vulnerability in the OSPF implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11...