1896 matches found
Debian DLA-1651-1 : libgd2 security update
Several issues in libgd2, a graphics library that allows to quickly draw images, have been found. CVE-2019-6977 A potential double free in gdImagePtr has been reported by Solmaz Salimi aka. Rooney. CVE-2019-6978 Simon Scannell found a heap-based buffer overflow, exploitable with crafted image dat...
CVE-2018-20175
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service segfault...
PT-2019-1912
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an out-of-bounds read in the rdesktop RDP client, specifically in the mcs.c file. This can be exploited by a remote attacker to cause a denial of service. The...
Arbitrary Code Execution
ccid is vulnerable to arbitrary code execution attacks. The vulnerability exists as a signedness error in ccidserial.c in libccid in the USB Chip/Smart Card Interface Devices CCID driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to...
SUSE SLES12 Security Update : php5 (SUSE-SU-2018:0216-1)
This update for php5 fixes several issues. These security issues were fixed : - CVE-2018-5712: Prevent reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file that allowed for information disclosure bsc1076220 - CVE-2018-5711: Prevent integer signedness error that could...
Exploit for Improper Validation of Array Index in Ethereum Go_Ethereum
CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 T...
MGASA-2018-0367 Updated libgd packages fix security vulnerabilities
The updated packages fix security vulnerabilities: gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated...
Denial Of Service (DoS)
github.com/ethereum/go-ethereum is vulnerable to denial of service DoS attacks. The library contains an integer signedness error in an array index, allowing a malicious user to pass a packet with a -1 query.Skip value to crash the application...
Integer overflow
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...
CVE-2018-12018
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...
PT-2018-10944
Name of the Vulnerable Software and Affected Versions geth versions prior to 1.8.11 Description The issue is related to an integer signedness error in the GetBlockHeadersMsg handler of the LES protocol implementation, which can lead to an access violation. This allows attackers to launch a Denial...
CVE-2018-12018: Improper Validation of Array Index
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip...
Oracle Linux 6 : kernel (ELSA-2018-1854)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1854 advisory. - powerpc 64s: Add support for a store forwarding barrier at kernel entry/exit Mauricio Oliveira 1581053 CVE-2018-3639 - x86 specctrl: Fix late microco...
SUSE-SU-2018:0806-1 Security update for php53
This update for php53 fixes several issues. These security issues were fixed: - CVE-2016-10712: In PHP all of the return values of streamgetmetadata could be controlled if the input can be controlled e.g., during file uploads. bsc1080234 - CVE-2018-5712: Prevent reflected XSS on the PHAR 404 erro...
Debian: Security Advisory (DLA-1305-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1305-1 : ming security update
Multiple vulnerabilities have been discovered in Ming : CVE-2018-5251 Integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file. CVE-2018-5294...
openSUSE Security Update : libXcursor (openSUSE-2018-196)
This update for libXcursor fixes the following issues : - CVE-2017-16612: It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments. boo1065386 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
Medium: php56, php70, php71
Issue Overview: Reflected XSS in .phar 404 page An issue was discovered in PHP; there is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file. CVE-2018-5712 Denial of Service DoS via infinite loop in libgd gdImageCreateFromGifCtx function in ext/gd/libgd/gdgifin.c Th...
CVE-2018-6412
In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel, up to and including 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands...
DEBIAN-CVE-2018-6412
In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands...