UBUNTU-CVE-2019-14283

In the Linux kernel before 5.2.3, setgeometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy...

CVE-2019-2727

Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite subcomponent: Load Testing for Web Apps. The supported version that is affected is 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

GHSA-CMFG-87VQ-G5G4 Deserialization of untrusted data in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specificall...

Deserialization of untrusted data in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specificall...

moinejf abcm2ps buffer overflow vulnerability

moinejf abcm2ps is a command line program that converts music tunes from ABC notation to PostScript or SVG format. The 'getkey' function in the parse.c file and the 'delayedoutput' function in the music.c file in moinejf abcm2ps 8.13.16 and earlier versions have a Buffer Overflow Vulnerability. T...

The vulnerability of the __usb_get_extra_descriptor function in the USB subsystem of Linux kernel systems allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the usbgetextradescriptor function in the USB subsystem’s driver code drivers/usb/core/usb.c in Linux kernels is related to errors in reading the additional descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of th...

openSUSE Security Update : libssh2_org (openSUSE-2019-1640)

This update for libssh2org fixes the following issues : - Fix the previous fix for CVE-2019-3860 bsc1136570, bsc1128481 Out-of-bounds reads with specially crafted SFTP packets This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2019-1646)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption...

Security update for libssh2_org (moderate)

openSUSE Security Update: Security update for libssh2org Announcement ID: openSUSE-SU-2019:1640-1 Rating: moderate References: 1128481 1136570 Cross-References: CVE-2019-3860 Affected Products: openSUSE Leap 42.3 An update that solves one vulnerability and has one errata is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1623-1 Rating: moderate References: 1138425 Affected Products: openSUSE Backports SLE-15 An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixes th...

OPENSUSE-SU-2019:1619-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - disable indirect reads that disclosed file contents from the local system boo1138425...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1619-1 Rating: moderate References: 1138425 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This...

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:1606-1)

This update for libssh2org fixes the following issues : Fix the previous fix for CVE-2019-3860 bsc1136570, bsc1128481 Out-of-bounds reads with specially crafted SFTP packets Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2019:14099-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Fix the previous fix for CVE-2019-3860 bsc1136570, bsc1128481 Out-of-bounds reads with specially crafted SFTP packets...

SUSE-SU-2019:14098-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Fix the previous fix for CVE-2019-3860 bsc1136570, bsc1128481 Out-of-bounds reads with specially crafted SFTP packets...

libssh2 security update

1.4.3-12.0.1.el76.2 - Orabug: 29909723 Added patch CVE-2019-3862 added length checks to prevent out-of-bounds reads and writes in libssh2packetaddCVE-2019-3862...

The vulnerability of the SINAMICS PERFECT HARMONY GH180 driver software, related to configuration parameter errors, allows a hacker to cause the controller to restart.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to configuration errors. Exploiting this vulnerability could allow an attacker, who has access to the device via the field bus, to cause the controller to restart by performing read/write requests for parameters...

Xen Project Microarchitectural Data Sampling Speculative Side-Channel Vulnerabilities (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (XSA-297)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by microarchitectural data sampling speculative side-channel vulnerabilities. These vulnerabilities may allow a local attacker on a guest machine to sample the contents of memory reads and...

Information Disclosure

PHP is vulnerable to information disclosure vulnerability. This is because an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to...

Out-Of-Bounds Read

Linux kernel is vulnerable to out-of-bounds reads. This is because the IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option. Local users could cause a denial of service or possibly have unspecified other impact via...