DEBIAN-CVE-2019-12499

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

CVE-2019-12499

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

UBUNTU-CVE-2019-12499

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

Command injection

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

CVE-2019-12499

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

CVE-2019-12499

Technical details for CVE-2019-12499 are not provided in the supplied documents; information on affected products/versions, impact, and remediation is not available here. Monitor for updates from official advisories.

CVE-2019-12499

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

CVE-2019-12499: Undefined Security Weakness

Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...

PT-2019-12828

Name of the Vulnerable Software and Affected Versions Firejail versions prior to 0.9.60 Description The issue allows for the truncation of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated under specific conditions. These condition...

CVE-2018-11930

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...

Input validation

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...

CVE-2018-11930

CVE-2018-11930: Improper input validation in WLAN function can cause integer truncation. Affected Qualcomm Snapdragon families include Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile across SDM/SDX/SM7150 and related platforms; CVSSv3 base 9.8 (Network, low attack complexity, no user i...

CVE-2018-11930

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...

CVE-2018-11930: Integer Underflow (Wrap or Wraparound)

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...

PT-2019-8823

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Compute versions affected versions not specified Qualcomm Snapdragon Consumer IOT versions affected versions not specified Qualcomm Snapdragon Industrial IOT...

Arbitrary Code Execution

libxfont is vulnerable to arbitrary code execution. An integer truncation flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the...

EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2019-1285)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freerdp: Integer truncation leading to heap-based buffer overflow in Updatereadbitmapupdate function CVE-2018-8786 - freerdp: Integer overflow...

EulerOS 2.0 SP3 : freerdp (EulerOS-SA-2019-1284)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freerdp: Integer truncation leading to heap-based buffer overflow in Updatereadbitmapupdate function CVE-2018-8786 - freerdp: Integer overflow...

EulerOS 2.0 SP2 : freerdp (EulerOS-SA-2019-1283)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freerdp: Integer truncation leading to heap-based buffer overflow in Updatereadbitmapupdate function CVE-2018-8786 - freerdp: Integer overflow...

Amazon Linux 2 : freerdp (ALAS-2019-1191)

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution.CVE-2018-8788 FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffe...