Low: Red Hat Security Advisory: ntp security update

An update for ntp is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Triangle MicroWorks DNP3 Outstation Libraries

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Triangle MicroWorks Equipment: DNP3 Outstation Libraries Vulnerability: Stacked-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could possibly allow remote...

CVE-2015-8546

Concrete details: CVE-2015-8546 affects Samsung mobile devices with Shannon333 baseband (Galaxy S6/S6 Edge/S6 Edge+/Note5) and firmware up to 2015-11-12. Vulnerability is a stack-based buffer overflow in the baseband process, enabling remote code execution via a fake base station. Exploitation st...

Stack-based Buffer Overflow

The Network Time Protocol NTP is vulnerable to Stack-based Buffer Overflow. A buffer overflow flaw was found in the ntpq diagnostic command. A malicious, remote server could send a specially-crafted reply to an ntpq request that could crash ntpq or, potentially, execute arbitrary code with the...

CentOS 7 : php (RHSA-2020:1112)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1112 advisory. - An issue was discovered in ext/phar/pharobject.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is...

CVE-2018-11218

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows...

php security update

CentOS Errata and Security Advisory CESA-2020:1112 An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libsndfile security update

CentOS Errata and Security Advisory CESA-2020:1185 An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Stack overflow

An issue was discovered on Samsung mobile devices with N7.x O8.x, and P9.0 Exynos chipsets software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 September 2018...

CVE-2018-21057

An issue was discovered on Samsung mobile devices with N7.x O8.x, and P9.0 Exynos chipsets software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 September 2018...

CVE-2016-11028

An issue was discovered on Samsung mobile devices with software through 2016-09-13 Exynos AP chipsets. There is a stack-based buffer overflow in the OTP TrustZone trustlet. The Samsung IDs are SVE-2016-7173 and SVE-2016-7174 December 2016...

CVE-2016-11028

CVE-2016-11028 : A stack-based buffer overflow exists in the OTP TrustZone trustlet on Samsung mobile devices with Exynos AP chipsets (firmware up to 2016-09-13). Affected Samsung IDs are SVE-2016-7173 and SVE-2016-7174. The issue, described across multiple sources, does not provide explicit expl...

libsndfile security update

1.0.25-11 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598577...

CVE-2020-11528

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

Stack overflow

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

CVE-2020-11528

The CVE-2020-11528 issue affects bit2spr (bitmap format converter). A stack-based buffer overflow occurs in conv_bitmap (bit2spr.c) from a long line in a bitmap file, enabling a 129-byte write overflow. Public sources describe potential arbitrary code execution or a crash. No vendor/product versi...

Updated dcraw packages fix security vulnerabilities

The updated packages fix security vulnerabilities: There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack. CVE-2017-13735 In LibRaw through 0.18.4, an out of bounds read flaw related to...

EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1342)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow was discovered in the Linux kernel's Marvell WiFi chip driver. The flaw could occur when...

SUSE SLES12 Security Update : glibc (SUSE-SU-2020:0832-1)

This update for glibc fixes the following issues : CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution bsc1167631. CVE-2020-1751...

SUSE SLES12 Security Update : memcached (SUSE-SU-2020:0843-1)

This update for memcached fixes the following issues : Security issue fixed : CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. Note that Tenable Network Security has extracted the preceding descripti...