CVE-2024-47706

Markdown: CVE-2024-47706 is tied to a Linux kernel issue in the bfq/I/O scheduler where an UAF could occur when bfqq structures are merged across BICs (bfqq1 → bfqq2 → bfqq3). The connected Astra Linux bulletin reproduces the scenario: on insert, a bfqq handle is obtained from the merge chain, bu...

OSV-2023-568 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60565 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...

Hotfix XS82E007 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. This hotfix supersedesHotfix XS82E005. All customers who are affected by the issues described inCTX282314 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this...

CVE-2019-14075

CVE-2019-14075 is a null pointer dereference in the Snapdragon radio interface layer (sapmodule destructor). Affected products include Qualcomm Snapdragon Auto/Consumer IOT/Industrial IOT/Mobile across listed chips (e.g., SDM6x, SM8x, SDM63x/66x family and related platforms). Root cause: missing ...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2020-02152)

Mozilla Firefox is an open source web browser. A denial of service vulnerability exists in Mozilla Firefox. An attacker can crash/hang a remote user's browser by sending a crafted URL...

Design/Logic Flaw

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any...

Kernel update: Virtuozzo ReadyKernel patch 82.2 for Virtuozzo 7.0.8 HF1 and 7.0.10 HF1

The fixes for CVE-2019-11477 and CVE-2019-11478 released in the ReadyKernel patch 82.0 turned out to cause network-related issues. These fixes are removed in this ReadyKernel patch for the kernels 3.10.0-862.11.6.vz7.64.7 Virtuozzo 7.0.8 HF1 and 3.10.0-957.12.2.vz7.86.2 Virtuozzo 7.0.10 HF1. Unti...

openSUSE Security Update : irssi (openSUSE-2018-18)

This update for irssi to version 1.0.6 fixes several issues that may affect the stability of irssi : - CVE-2018-5205: Data access beyond the end of the string when using incomplete escape codes - CVE-2018-5206: NULL pointer dereference when the channel topic is set without specifying a sender -...

SUSE-SU-2016:3169-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-69 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE-SU-2015:1109-1 Security update for python-Django

python-django was updated to 1.6.11 to fix security issues and non-security bugs. The following vulnerabilities were fixed: Made issafeurl reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs bnc923176, CVE-2015-2317 Fixed an infinite loop...

Mozilla Releases Firefox 3.5.13 and 3.6.10

The Mozilla Foundation has released Firefox 3.5.13 and 3.6.10 to address a stability issue affecting some users. US-CERT encourages users and administrators to review the release notes for Firefox 3.5.13 and Firefox 3.6.10 and apply any necessary updates to mitigate the issue. This product is...

Blue Moon Security Advisory 2009-04

BLUE MOON SECURITY ADVISORY 2009-04 =================================== :Title: Remote Denial of Service in Internet Explorer :Severity: Moderate :Reporter: Blue Moon Consulting :Products: Internet Explorer 7 and 8 :Fixed in: -- Description ----------- We could not find out the definitive...

[BMSA 2009-04] Remote DoS in Internet Explorer

BLUE MOON SECURITY ADVISORY 2009-04 =================================== :Title: Remote Denial of Service in Internet Explorer :Severity: Moderate :Reporter: Blue Moon Consulting :Products: Internet Explorer 7 and 8 :Fixed in: -- Description ----------- We could not find out the definitive...

A very large href attribute value in HTML can crash Opera – Opera Security Advisories

A very large href attribute value in HTML can crash Opera – Opera Security Advisories OPCOM Team | September 5, 2006 Summary A very large href attribute value in a Web page can crash Opera. Severity: Not a security issue Problem description A Web page containing a very large href attribute value...

Multiple WinAmp memory corruptions

Multiple memory corruptions...

rainbow.six.bof.txt

Date: Thu, 11 Feb 1999 17:37:43 -0500 From: Brian Gemberling To: [email protected] Subject: Rainbow Six Buffer Overflow..... Rainbow Six Multiplayer can be crashed with a buffer overflow just like quake2... If someone makes the Nick something like...