resolved-dns-stream Code Execution

The vulnerabilities of the onstreamio and dnsstreamcomplete functions in the resolved-dns-stream.c component of the initialization and service management subsystem of the Systemd-based Linux operating systems are related to the use of memory after it is freed. Exploiting these vulnerabilities cou...

Security Bulletin: Vulnerability in RC4 stream cipher affects WebSphere Business Services Fabric (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” attack for SSL/TLS affects IBM WebSphere Application Server that is used by WebSphere Business Services Fabric. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to...

MAL-2022-5704 Malicious code in readle-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11ef76e1f19597fa2b61b5c014d6b1158784268a73a2c8d0e5ac5e7b1c7f4350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in readle-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11ef76e1f19597fa2b61b5c014d6b1158784268a73a2c8d0e5ac5e7b1c7f4350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in readle-stream

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-4074 Malicious code in jsonstsream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad603782f6b86001b6c2dd63872a91ae48f92ea411b205a673b1c04a1c4fe978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Red Hat Enterprise Linux Resource Management Vulnerability

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat, Inc. A security vulnerability in Red Hat Enterprise Linux exists because the onstreamio function and the dnsstreamcomplete function in resolved-dns-stream.c do not increment the reference count of a DnsStream...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in s_file_write_flush

Detailed Report: https://oss-fuzz.com/testcase?key=4569074331418624 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61100001ed58 Crash State:...

CVE-2022-38238

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar at /xpdf/Stream.cc...

CVE-2022-38235

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-38230

XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...

CVE-2022-38229

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

CVE-2022-38229

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

CVE-2022-38228

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...

CVE-2022-38228

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...

CVE-2022-35108

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-35104

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35104

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35108

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

UBUNTU-CVE-2022-38235

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...