UBUNTU-CVE-2019-5436

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1...

CVE-2019-11683

udpgroreceivesegment in net/ipv4/udpoffload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service slab-out-of-bounds memory corruption or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka t...

Weak Authentication

The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. Multiple buffer overflow flaws were discovered in ntpd's cryptorecv, ctlputdata, and configure functions. A remote attacker could use either of these flaws to send a specially crafted request...

PT-2019-12479 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.13 Description: The issue allows remote attackers to cause a denial of service or possibly have other impacts via UDP packets with a 0 payload, due to mishandling of padded packets. This is related to the ud...

openSUSE Security Update : gitolite (openSUSE-2019-754)

This update for gitolite fixes the following issues : Gitolite was updated to 3.6.9 : - CVE-2018-16976: prevent racy access to repos in process of migration to gitolite boo1108272 - 'info' learns new '-p' option to show only physical repos as opposed to wild repos The update to 3.6.8 contains : -...

openthread/radio-receive-done-fuzzer: Crash in ot::Buffer::GetNextBuffer

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5727516331868160 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::Timer::GetFireTime

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5676787198066688 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::PriorityQueue::GetHead

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5711975328251904 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::TimerScheduler::Remove

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5184402940755968 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::Message::GetPriority

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5712935857422336 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::TaskletScheduler::PopTasklet

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5636797361553408 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::NetworkData::GetNextOnMeshPrefix

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5765994272784384 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Cra...

openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5746988237193216 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Cra...

openthread/ip6-send-fuzzer: Index-out-of-bounds in ot::Coap::Message::ParseHeader

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5162663452082176 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type:...

openthread/radio-receive-done-fuzzer: Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629815537795072 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c. Remediation There is no fixed version for libiec61850. References - Github.com - GitHub Issue...

QEMU 'rtl8139_do_receive' function buffer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A buffer overflow vulnerability exists in the 'rtl8139doreceive' function of the hw/net/rtl8139.c file in QEMU, which stems from the program...

QEMU Buffer Overflow Vulnerability (CNVD-2018-20656)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A buffer overflow vulnerability exists in the 'pcnetreceive' function of the hw/net/pcnet.c file in QEMU, which stems from the program using...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...