PT-2020-12552

Name of the Vulnerable Software and Affected Versions USC iLab cereal versions 1.3.0 and earlier Description An issue was discovered in USC iLab cereal where it employs caching of std::shared ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an...

CVE-2019-17210

A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString is called by the function MQTTDeserializepublish to get the length and content of the MQTT topic name. In the function readMQTTLenString, mqttstring-lenstring.len is a part of us...

Design/Logic Flaw

A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString is called by the function MQTTDeserializepublish to get the length and content of the MQTT topic name. In the function readMQTTLenString, mqttstring-lenstring.len is a part of us...

PT-2019-14538

Name of the Vulnerable Software and Affected Versions renderdoc crate versions prior to 0.5.0 Description The issue arises from methods in the renderdoc crate that take self by immutable reference, which is incompatible with multi-threaded applications and can lead to unexpected behavior when...

CVE-2019-2240

While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2019-2240

CVE-2019-2240 affects Qualcomm Snapdragon platforms (Auto/Compute/Connectivity, Snapdragon family across IPQ4xxx through SDX lines, QCA wireless ICs, etc.). Description: error handling during rendering of surface content to the screen is not properly checked, causing unpredictable behavior. Root ...

CVE-2019-2240: Improper Handling of Exceptional Conditions

While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Can a Vulnerability Scan break servers and services?

The most serious problem of Vulnerability Scanners is that they are too complex and unpredictable. Usually they don't affect the target hosts, but when they do, welcome to hell! And if you scan huge infrastructure, tens thousands hosts and more, it's not "if" the scanner will break the server it'...

FreeBSD-SA-18:01.ipsec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:01.ipsec REVISED Security Advisory The FreeBSD Project Topic: ipsec validation and use-after-free Category: core Module: ipsec Announced: 2018-03-07 Credits:...

zlib inflateMark Buffer Overflow

The vulnerability of the inflateMark function in the zlib library is caused by an error in handling negative numbers. Exploiting this vulnerability could allow a remote attacker to cause unpredictable behavior in the program, which may lead to violations of confidentiality, integrity, and...

CVE-2017-1230

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. This weakness may allow attackers to expose sensitive information by guessing tokens or identifiers. IBM X-Force ID: 123909...

ImageMagick coders/ipl.c undefined behavior

The vulnerability of the coders/ipl.c component in the console-based graphic editor ImageMagick is related to the lack of proper checking for the malloc function. Exploiting this vulnerability allows a remote attacker to cause unpredictable effects...

ImageMagick coders/psd.c undefined effect

The vulnerability of the coders/psd.c component in the console-based ImageMagick graphics editor is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to exert unpredictable effects remotely...

Qualcomm Android Indefinite Influence

The vulnerability of the Qualcomm operating system Android is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause unpredictable effects...

Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID

I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from spoofing responses. For example, see MS08-020 when this happened...

GD Graphics Library Unpredictable Effect

The vulnerability of the gdio.c component of the GD Graphics Library arises due to a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause unpredictable effects by manipulating the number of horizontal and vertical elements in the image...

GD Graphics Library Unpredictable Effect

The vulnerability of the gdio.c component of the GD Graphics Library arises due to a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause unpredictable effects by manipulating the number of horizontal and vertical elements in the image...

Debian GNU/Linux DBD::mysql undefined behavior

The vulnerability of the mylogin function in the Debian GNU/Linux operating system and the DBD::mysql driver is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to have unpredictable effects by using the mysqlerrno function after the mylogin...

Audit of GitHub SSH Keys Finds Many Still Vulnerable to Old Debian Bug

An audit of the SSH keys associated with more than a million GitHub accounts shows that some users have weak, easily factorable keys and many more are using keys that are still vulnerable to the Debian OpenSSL bug disclosed seven years ago. The public SSH keys that users associate with their GitH...

JDK: Vulnerability in the IBMSecureRandom implementation of the IBMJCE and IBMSecureRandom cryptographic providers

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier f...