2305 matches found
DEBIAN-CVE-2020-15564
An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOPregistervcpuinfo. The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped...
CVE-2020-15564
An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOPregistervcpuinfo. The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped...
Missing alignment check in VCPUOP_register_vcpu_info
ISSUE DESCRIPTION The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped into Xen address space so it can be directly accessed. On Arm, the region is accessed with instructions which require a specific alignment...
The vulnerability in the cross-platform library LibVNCServer’s component libvncserver/rfbregion.c allows a attacker to cause a service failure.
The vulnerability in the cross-platform library LibVNCServer, located in the component libvncserver/rfbregion.c, is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
DEBIAN-CVE-2020-15469
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference...
UBUNTU-CVE-2020-15469
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference...
PT-2020-14436
Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0 Description A MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. Recommendations For QEMU version 4.2.0, at the moment, there is no information about a newer version that...
PT-2020-21921
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 8 crash type. The crash state involves several functions: jbig2 release huffman...
PT-2020-22642
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the jbig2 arith decode function, which is called by jbig2...
PT-2020-22051
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions jbig2 image get pixels fast, jbig2 decode generic template0 TPGDON,...
PT-2020-22528
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: jbig2 text region, jbig2 parse...
PT-2020-21698
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions jbig2 image get pixel fast, jbig2 decode generic template0 TPGDON,...
Hackers Target Military and Aerospace Staff by Posing as HRs Offering Jobs
Cybersecurity researchers today took the wraps off a new sophisticated cyber-espionage campaign directed against aerospace and military organizations in Europe and the Middle East with an aim to spy on key employees of the targeted firms and, in some case, even to siphon money. The campaign, dubb...
CVE-2020-0118
In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
CVE-2019-14054
Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...
CVE-2019-14054
CVE-2019-14054 describes an improper permissions issue in the XBL_SEC region that lets a local attacker update XBL_SEC code/data and divert the RAM dump path to a normal cold boot path on Qualcomm Snapdragon platforms. Affected families include Snapdragon Compute, Snapdragon Consumer IoT, Snapdra...
freerdp: Integer overflow in region.c
A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...
freerdp: Integer overflow in region.c
A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...
freerdp: Integer overflow in region.c
A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...