kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

CURL-CVE-2016-8622 URL unescape heap overflow via integer truncation

The URL percent-encoding decode function in libcurl is called curleasyunescape. Internally, even if this function would be made to allocate a destination buffer larger than 2GB, it would return that new length in a signed 32-bit integer variable, thus the length would get either truncated only or...

cookie injection for other servers

If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar. The issue pertains to the function that loads cookies into memory, which reads the specified file...

PT-2016-7521

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.51 Description A problem has been discovered where a malicious HTTP server can inject new cookies for arbitrary domains into a cookie jar file. This occurs when the cookie state is written into the cookie jar file and...

PT-2016-7528

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.51.0 Description The issue concerns the URL percent-encoding decode function in libcurl, internally known as curl easy unescape. This function can lead to libcurl writing outside of its heap-based buffer if it...

PT-2018-13636

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8 Description An issue in the Linux kernel allows local attackers to modify or truncate files in the underlying filesystem due to incorrect access checking in overlayfs mounts. Recommendations For versions prio...

PT-2017-9731

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25 Description The issue concerns the ReadPCXImage function in GraphicsMagick, which can be exploited by remote attackers through a crafted image. This exploitation leads to a memory allocation failure and results in...

PT-2017-9732

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25 Description The issue concerns the MagickMalloc function in magick/memory.c, which can be exploited by remote attackers through a crafted image. This exploitation triggers a memory allocation failure and results i...

SUSE-SU-2016:2507-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2016-7092: The getpagefroml3e function in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables bsc995785 - CVE-2016-7093: Xen...

Unbreakable Enterprise kernel security update

2.6.39-400.284.2 - Btrfs: fix truncation of compressed and inlined extents Divya Indi Orabug: 22307286 CVE-2015-8374 - Btrfs: fix file corruption and data loss after cloning inline extents Divya Indi Orabug: 22307286 CVE-2015-8374 - netfilter: xtables: make sure e-nextoffset covers remaining blob...

Fedora 23 : xen (2016-1c3374bcb9)

x86: Disallow L3 recursive pagetable for 32-bit PV guests XSA-185, CVE-2016-7092 1374470 x86: Mishandling of instruction pointer truncation during emulation XSA-186, CVE-2016-7093 1374471 x86 HVM: Overflow of shctxt-segreg XSA-187, CVE-2016-7094 1374473 Note that Tenable Network Security has...

ALPINE-CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

UBUNTU-CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

CVE-2016-7093

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

Modoer review system admin.php file contains vulnerabilities

Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system 20150505 version of the backend of the existence of file inclusion vulnerability, due to the code fails to exist for the existence of file...

Modoer review system field_type.inc.php file contains vulnerabilities

Modoer review system a professional review website system, a variety of industry reviews, you can freely regulate the type of review project. Modoer system 20150505 version of the background there is a file containment vulnerability, due to the code fails to exist for the existence of file...

CVE-2016-7093: Undefined Security Weakness

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation...

PT-2016-7211

Name of the Vulnerable Software and Affected Versions Xen versions 4.5.3, 4.6.3, and 4.7.x Description The issue allows local HVM guest OS administrators to overwrite hypervisor memory, which can lead to gaining host OS privileges. This is due to the mishandling of instruction pointer truncation...