CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

Microsoft Windows CLFS Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CLFS.SYS drive...

kernel: TLB flush happens too late on mremap

Since Linux kernel version 3.2, the mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the pagetables of a task that is in the middle of mremap, a stale TLB entry can remain for a short time that permits access to a physical pag...

MGASA-2020-0023 Updated openssl packages fix security vulnerability

Updated compat-openssl10 and openssl packages fix security vulnerability: There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and...

Vim Reuse After Release Vulnerability

Vim is a powerful, highly customizable text editor, an improved version of vi, with many improvements and features added to Vi. A post-release reuse vulnerability exists in the autocmd feature in window.c in versions of Vim prior to 8.1.2136. No detailed vulnerability details are provided at this...

Security Bulletin: Multiple vulnerabilities affect IBM Sterling Secure Proxy Configuration Manager

Summary Several vulnerabilities affect the Configuration Manager of the IBM Sterling Secure Proxy SSP product. The SSP Configuration Manager typically runs in the Secure Zone, and is not accessible from the internet. Vulnerability Details CVEID: CVE-2016-6026 DESCRIPTION: The Sterling Secure Prox...

Linux kernel memory misreference vulnerability (CNVD-2020-00260)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in Linux kernel 5.0.21. An attacker could exploit this vulnerability to...

CVE-2019-2230

In nfcManagerrouteAid and nfcManagerunrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2019-2230

In nfcManagerrouteAid and nfcManagerunrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2019-2230

CVE-2019-2230 affects Android 10 (NfcNative code in NativeNfcManager.cpp). The vulnerability arises from a use-after-free in nfcManager_routeAid and nfcManager_unrouteAid, leading to possible memory reuse and remote information disclosure without extra user interaction. Connected sources confirm ...

UBUNTU-CVE-2019-1551

There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are...

Decentralized Anonymous Payment System Data Forgery Issue Vulnerability

Decentralized Anonymous Payment System DAPS is a decentralized anonymous payment system. A Data Forgery Issue vulnerability exists in DAPS 2019-08-26 and prior versions, which stems from the program's use of a weak signature mechanism that can be exploited by an attacker to reuse signatures...

radare2 integer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. An integer overflow vulnerability in the newtokensize variable of the rasmmassemble function in libr/asm/asm.c in radare2 4.0 and earlier can be exploited by a remote attacker with specially crafted input to cause a post-relea...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

Linux kernel memory misreference vulnerability (CNVD-2019-45879)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in Linux kernel versions prior to 5.3.9. An attacker could exploit this...

Linux kernel memory misreference vulnerability (CNVD-2019-45877)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in Linux kernel versions prior to 5.3.7. An attacker could exploit this...

Linux kernel memory misreference vulnerability (CNVD-2019-45906)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in Linux kernel versions prior to 5.2.10. An attacker could exploit this...

Linux kernel memory misreference vulnerability (CNVD-2019-46996)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in Linux kernel 5.0.21. An attacker could cause post-release reuse to occu...