CVE-2018-1000657

Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vecdeque::VecDeque::reserve function that can result in Arbitrary code execution, but no...

CVE-2018-1000657

CVE-2018-1000657 overview (Rust std::collections::vec_deque::VecDeque::reserve) : The vulnerability affects the Rust standard library’s VecDeque::reserve() function in Rust releases starting with commit bfa0e1f58a… and prior to the fix. The root cause is a buffer overrun that can lead to Arbitrar...

CVE-2018-1000657: Improper Restriction of Operations within the Bounds of a Memory Buffer

Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vecdeque::VecDeque::reserve function that can result in Arbitrary code execution, but no...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.140-alt0.M80P.1

1:4.4.140-alt0.M80P.1 built July 16, 2018 kernelbot in task 209821 July 11, 2018 Kernel Bot - v4.4.140 Fixes: CVE-2018-10876, CVE-2018-10877, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883...

RUSTSEC-2018-0016 quickersort is deprecated and unmaintained

The author of the quickersort crate has deprecated it and does not recommend using it anymore. Everything in it has been incorporated into std::sortunstable in the standard library as of Rust 1.20. std::sortunstable: https://doc.rust-lang.org/stable/std/primitive.slice.htmlmethod.sortunstable...

quickersort is deprecated and unmaintained

The author of the quickersort crate has deprecated it and does not recommend using it anymore. Everything in it has been incorporated into std::sortunstable in the standard library as of Rust 1.20. std::sortunstable: https://doc.rust-lang.org/stable/std/primitive.slice.htmlmethod.sortunstable...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.138-alt0.M80P.1

June 19, 2018 Kernel Bot 1:4.4.138-alt0.M80P.1 - v4.4.138 Fixes: CVE-2018-10853...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.134-alt0.M80P.1

May 30, 2018 Kernel Bot 1:4.4.134-alt0.M80P.1 - v4.4.134 Fixes: CVE-2018-6412...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.129-alt0.M80P.1

1:4.4.129-alt0.M80P.1 built April 26, 2018 kernelbot in task 205236 April 24, 2018 Kernel Bot - v4.4.129 Fixes: CVE-2018-1092...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.126-alt0.M80P.1

1:4.4.126-alt0.M80P.1 built April 2, 2018 kernelbot in task 203309 April 1, 2018 Kernel Bot - v4.4.126 Fixes: CVE-2017-8824...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.122-alt0.M80P.1

1:4.4.122-alt0.M80P.1 built March 23, 2018 kernelbot in task 202625 --- March 21, 2018 Kernel Bot &[email protected] - v4.4.122 Fixes: CVE-2018-1000004...

PT-2018-2390

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.30 and earlier Description The issue is related to the swap std reloc in function in aoutx.h within the Binary File Descriptor BFD library, also known as libbfd. This function is vulnerable to a denial of service attack...

gdal/cad_fuzzer: Crash in std::__1::to_string

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5640476095938560 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0f80000ff414 Crash...

dlplibs: Bad-free in std::__1::__shared_ptr_pointer<librevenge::RVNGInputStream*, std::__1::default_d

Detailed report: https://oss-fuzz.com/testcase?key=5495959146463232 Project: dlplibs Fuzzer: afldlplibswpdfuzzer Fuzz target binary: wpdfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Bad-free Crash Address: 0x7f5d72160220 Crash State: std::1::sharedptrpointer::sharedptr...

dlplibs: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed report: https://oss-fuzz.com/testcase?key=6258184752726016 Project: dlplibs Fuzzer: libFuzzerdlplibszmffuzzer Fuzz target binary: zmffuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000741 Crash State:...

llvm_libcxxabi: Negative-size-param in std::__1::char_traits<char>::copy

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6519608255184896 Project: llvmlibcxxabi Fuzzer: aflllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: aflasanllvmlibcxxabi Platform Id: linux Crash Type:...

libtsm: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4858886169296896 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerubsanlibtsm Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe13981c...

llvm_libcxxabi: Negative-size-param in std::__1::char_traits<char>::move

Project: https://github.com/llvm/llvm-project.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5058069700542464 Project: llvmlibcxxabi Fuzzer: libFuzzerllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: libfuzzerasanllvmlibcxxabi Platform Id:...

Linux Kernel 2.6.22 < 3.9 - Dirty COW /proc/self/mem Race Condition Privilege Escalation (/etc/pa

Exploit for linux platform in category local exploits // EDB-Note: Compile: g++ -Wall -pedantic -O2 -std=c++11 -pthread -o dcow 40847.cpp -lutil // EDB-Note: Recommended way to run: ./dcow -s Will automatically do "echo 0 /proc/sys/vm/dirtywritebackcentisecs" // //...

Security fix for the ALT Linux 7 package kernel-image-std-def version 1:3.14.79-alt0.M70P.2

1:3.14.79-alt0.M70P.2 built Oct. 25, 2016 Anton V. Boyarshinov in task 171284 Oct. 24, 2016 Anton V. Boyarshinov - CVE-2016-5195 fixed...