CVE-2019-11729

Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

Mozilla Firefox ESR < 60.8

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-22 advisory. - A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2019-9811: Sandbox escape via installation of malicious language pack CVE-2019-11711: Script injection within domain through inner window reuse CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects CVE-2019-11713:...

EulerOS 2.0 SP5 : qt (EulerOS-SA-2019-1688)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19869 Note that Tenable...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

CVE-2019-12995 affects Istio prior to 1.2.2. The issue arises when processing certain access tokens, causing a segmentation fault in jwt_authenticator.cc within Envoy and resulting in the message “Epoch 0 terminated with an error.” Public details consistently describe the root cause as mishandlin...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

Improper Input Validation

Istio mishandles certain access tokens, leading to Epoch 0 terminated with an error in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

The vulnerability of the histogram construction utility for PGM and PPM files, pnmhistmap, related to segmentation errors, allows a hacker to cause a service failure.

The vulnerability of the histogram construction utility for PGM and PPM files, pnmhistmap, is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

The vulnerability of the imgcmp image comparison tool, related to segmentation errors, allows a hacker to cause a service failure.

The vulnerability of the image comparison utility imgcmp is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data into the command line...

The vulnerability of the lnstat network statistics collection program, related to memory initialization errors, allows a hacker to cause a service failure.

The vulnerability of the lnstat network statistics collection program is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause the program to terminate abnormally due to a SIGSEGV signal, caused by attempting to access memory at address 0 after...

The vulnerability of the JPEG2000 file conversion tool “jasper” is related to segmentation errors, which allows a malicious actor to cause a service failure.

The vulnerability of the JPEG2000 file conversion tool “jasper” is related to segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...

OPENSUSE-SU-2019:1624-1 Security update for aubio

This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults CVE-2018-19800, boo1137828, CVE-2018-19801, boo1137822, CVE-2018-19802, boo1137823: This update was imported from the openSUSE:Leap:15.0:Update update project...

OPENSUSE-SU-2019:1618-1 Security update for aubio

This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults CVE-2018-19800, boo1137828, CVE-2018-19801, boo1137822, CVE-2018-19802, boo1137823:...

Flaw in string parsing can lead to crashes due to invalid memory access.

The affected version of this crate did not guard against accessing memory beyond the range of its input data. A pointer cast to read the data into a 256-bit register could lead to a segmentation fault when the end plus the 32 bytes 256 bit read would overlap into the next page during string...

RUSTSEC-2019-0008 Flaw in string parsing can lead to crashes due to invalid memory access.

The affected version of this crate did not guard against accessing memory beyond the range of its input data. A pointer cast to read the data into a 256-bit register could lead to a segmentation fault when the end plus the 32 bytes 256 bit read would overlap into the next page during string...

Netperf 2.6.0 - Stack-Based Buffer Overflow Exploit

Exploit Author: Juan Sacco - http://exploitpack.com Tested on: Kali i686 GNU/Linux Description: Netperf 2.6.0 s a benchmark tool than developed by Helett Packard that can be used to measure the performance of many different types of networking. It provides tests for both unidirectional troughput...

Netperf 2.6.0 - Stack-Based Buffer Overflow

Netperf 2.6.0 - Stack-Based Buffer Overflow Exploit Author: Juan Sacco - http://exploitpack.com Tested on: Kali i686 GNU/Linux Description: Netperf 2.6.0 s a benchmark tool than developed by Helett Packard that can be used to measure the performance of many different types of networking. It...

Netperf 2.6.0 Buffer Overflow

Exploit Author: Juan Sacco - http://exploitpack.com Tested on: Kali i686 GNU/Linux Description: Netperf 2.6.0 s a benchmark tool than developed by Hewlett Packard that can be used to measure the performance of many different types of networking. It provides tests for both unidirectional troughput...