Design/Logic Flaw

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution...

PT-2019-14921

Name of the Vulnerable Software and Affected Versions BMC Patrol Agent version 9.0.10i Description An issue was discovered that could allow an attacker to elevate privileges to those of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution of the...

PT-2019-14922

Name of the Vulnerable Software and Affected Versions BMC Patrol Agent version 9.0.10i Description An issue was discovered that allows an attacker with "patrol" privileges to elevate their privileges to those of the "root" user. This can be achieved by specially crafting a shared library .so file...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflow. The vulnerability exists due to lack of careful bounds checking in Exiv2::MrwImage::readMetadata in mrwimage.cpp, leading to an out-of-bounds read...

Buffer Over-read

libexiv2.so is vulnerable to buffer over-read. The function RafImage::readMetadata in rafimage.cpp ignores the buffer size when reading metadata of raf images which can lead to an out-of-bounds read...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. The vulnerability exists because the function Exiv2::MrwImage::readMetadata in mrwimage.cpp does not handle the bound checking properly, causing an application crash...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer overflow in the tiff parser allows an attacker to crash the application, or potentially execute arbitrary code...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. The attack is possible because it does not handle a NULL return from the functions strchr or strstr if a malicious server provides a string without a space character or without a blank line, crashing the application due to null pointer dereferen...

[SECURITY] [DLA 1823-1] linux security update

Package : linux Version : 3.16.68-2 CVE ID : CVE-2019-3846 CVE-2019-5489 CVE-2019-10126 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11810 CVE-2019-11833 CVE-2019-11884 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service DoS. The attack exists because it allows establishment of simultaneous TCP client connections, resulting in exhaustion of resources for network and management of pool of files such as logs, descriptor files, zone journal files etc...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190423)

Security Fixes : - Kernel: KVM: potential use-after-free via kvmioctlcreatedevice CVE-2019-6974 - Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer CVE-2019-7221 Bug Fixes : - rbd: avoid corruption on partially completed bios rhel-7.6.z - xfsvmwritepages deadl...

Design/Logic Flaw

Incorrect Access Controls of Security Officer SO in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in...

CVE-2018-19589

The CVE-2018-19589 describes incorrect access controls in the PKCS11 R2 provider shipping with Utimaco CryptoServer HSM. An SO authenticated to a slot can retrieve attributes of keys marked as private in external key storage and can delete such keys, potentially compromising availability of all e...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...

CVE-2019-10654

The CVE-2019-10654 issue concerns Long Range ZIP (lrzip) 0.631 using liblzo2.so.2 (LZO 2.10). The vulnerable component is lzo1x_decompress; a crafted archive can trigger an invalid memory read leading to denial of service (application crash). This is tied to the same lrzip vulnerability family as...

CVE-2019-10654

The lzo1xdecompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip aka lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive, a different vulnerability than CVE-2017-8845...