CVE-2016-7544

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based malloca and freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed...

uninitialized random

libcurl's new internal function that returns a good 32-bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. This random value is used to generate nonces for Digest and NTLM authentication, for generating boundary...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the secure-session function in the mm-video-v4l2 venc component of the Android operating system’s media server is related to incorrect handling of stack pointers. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential informati...

UBUNTU-CVE-2016-1639

Use-after-free vulnerability in browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging...

IBM Spectrum Scale and General Parallel File System Denial of Service Vulnerability

IBM Spectrum Scale and General Parallel File System GPFS are both products of IBM Corporation of the U.S.A. IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a set of data and file management solutions based on IBM GPFS. IBM...

Wireshark DEC DNA Routing Protocol Handles Remote Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. The setdnetaddress function in the Wireshark DEC DNA routing protocol 'packet-dec-dnart.c' handles data with a pointer error, which allows remote attackers to exploit vulnerabilities to construct malicious messages and trick users into...

Kernel: USB io_ti driver NULL pointer dereference in routine chase_port

The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service NULL pointer dereference and system crash via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter...

Path traversal

The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...

IBM solidDB RPC Test Commands Denial of Service Vulnerabilities

This host is running IBM solidDB and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmsoliddbrpctestsvcdosvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ IBM solidDB RPC Test Commands Denial of Service Vulnerabilities Authors: Antu Sanadi Copyright:...

IBM solidDB RPC Test Commands Denial of Service Vulnerabilities

IBM solidDB is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. OpenVAS Vulnerability Test $Id: secpodms10-079.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Word Remote Code Execution Vulnerabilities 2293194 Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

kernel: ipv6: fix ip6_dst_lookup_tail() NULL pointer dereference

The ip6dstlookuptail function in net/ipv6/ip6output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service NULL pointer dereference and OOPS or...

Mozilla Firefox 'GIF' File DoS Vulnerability (Nov 2009) - Windows

Mozilla Firefox is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200704-20 : NAS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-20 NAS: Multiple vulnerabilities Luigi Auriemma has discovered multiple vulnerabilities in NAS, some of which include a buffer overflow in the function acceptattlocal, an integer overflow in the function ProcAuWriteElement,...

NAS: Multiple vulnerabilities

Background NAS is a network transparent, client/server audio transport system. Description Luigi Auriemma has discovered multiple vulnerabilities in NAS, some of which include a buffer overflow in the function acceptattlocal, an integer overflow in the function ProcAuWriteElement, and a null...

[SA14874] Novell NetWare Unspecified TCP Packet Handling Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Novell NetWare Unspecified TCP Packet Handling Denial ...