DEBIAN-CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

Wipers - Destruction as a means to an end

This whitepaper post is authored by Vitor Ventura and with contributions from Martin Lee In a digital era when everything and everyone is connected, malicious actors have the perfect space to perform their activities. During the past few years, organizations have suffered several kinds of attacks...

Code injection

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The vulnerability CVE-2018-10776 affects mp3gain (mpglibDBL/common.c, getbits) up to version 1.5.2-r2. The getbits function is exposed to remote inputs and can cause a denial of service via segmentation fault and application crash, with possible unspecified additional impact. Documents identify t...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

mp3gain Denial of Service Vulnerability

mp3gain is a volume adjustment application for MP3 files. A security vulnerability exists in the 'getbits' function in the mpglibDBL/common.c file in mp3gain 1.5.2-r2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and...

Design/Logic Flaw

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

EulerOS 2.0 SP2 : binutils (EulerOS-SA-2018-1099)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an...

p7zip -- usage of uninitialized memory

NVD reports: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

SUSE SLED12 / SLES12 Security Update : rzsz (SUSE-SU-2018:1066-1)

This update for rzsz fixes the following issues : - Update to 0.12.21rc to fix bsc1086416 and bsc1090051 - CVE-2018-10195: segmentation fault in zsdata function could lead to denial of service bsc1090051 Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE-SU-2018:1066-1 Security update for rzsz

This update for rzsz fixes the following issues: - Update to 0.12.21rc to fix bsc1086416 and bsc1090051 - CVE-2018-10195: segmentation fault in zsdata function could lead to denial of service bsc1090051...