3842 matches found
CVE-2017-1099
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659...
PT-2017-11665 · Ibm · Ibm Jazz Foundation
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation affected versions not specified Description: The issue could expose potentially sensitive information to authenticated users through stack trace error conditions. Recommendations: At the moment, there is no information abo...
GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference
GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference Source: https://bugzilla.gnome.org/showbug.cgi?id=775120 The attached file will cause a null pointer access and segfault in the mpegts parser. Current git code, found with afl. ASAN stack trace:...
GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference
Source: https://bugzilla.gnome.org/showbug.cgi?id=775120 The attached file will cause a null pointer access and segfault in the mpegts parser. Current git code, found with afl. ASAN stack trace: ================================================================= ==32545==ERROR: AddressSanitizer: SE...
USN-3313-2 linux-hwe vulnerability
USN-3313-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. It was discovered that a buffer overflow existed in the trace subsystem in the Linux kernel. A...
USN-3312-2 linux-lts-xenial vulnerabilities
USN-3312-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the netfilter netlink implementation in the Linux kernel did no...
USN-3312-2: Linux kernel (Xenial HWE) vulnerabilities
USN-3312-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the netfilter netlink implementation in the Linux kernel did no...
USN-3312-1 linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the netfilter netlink implementation in the Linux kernel did not properly validate batch messages. A local attacker with the CAPNETADMIN capability could use this to expose sensitive information or cause a denial of service. CVE-2016-7917 Qian Zhang discovered a heap-based...
USN-3312-1: Linux kernel vulnerabilities
It was discovered that the netfilter netlink implementation in the Linux kernel did not properly validate batch messages. A local attacker with the CAPNETADMIN capability could use this to expose sensitive information or cause a denial of service. CVE-2016-7917 Qian Zhang discovered a heap-based...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3312-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3312-1 advisory. It was discovered that the netfilter netlink implementation in the Linux kernel did not properly validate batch messages. A local attacker with the...
USN-3313-1: Linux kernel vulnerability
It was discovered that a buffer overflow existed in the trace subsystem in the Linux kernel. A privileged local attacker could use this to execute arbitrary code...
IBM TSM Client 'Password' Information Disclosure Vulnerability - Mac OS X
IBM Tivoli Storage Manager Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Informatica: [doc.rt.informaticacloud.com] Reflected XSS via Stack Strace
Hello. PoC for reflected XSS: http://doc.rt.informaticacloud.com/infocenter/ActiveVOS/v92/nav/712321 Response: HTTP ERROR 500 Problem accessing /help/nav/712321%3Csvg/onload=alertdocument.domain%3E. Reason: For input string: "1svg/onload=alertdocument.domain"Caused...
AutoTrace Denial of Service Vulnerability (CNVD-2017-08498)
AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the libautotrace.a file in AutoTrace version 0.31.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid write and SEGV...
AutoTrace heap buffer overflow vulnerability (CNVD-2017-08478)
AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function of input-bmp.c:337:25 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute...
CVE-2017-9198
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18...
CVE-2017-9174
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the GETCOLOR function in color.c:21:23...
CVE-2017-9167
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...