CVE-2017-0862

CVE-2017-0862 is an elevation of privilege in the Android upstream kernel (Kernel component). The connected records consistently describe it as a Kernel EoP issue affecting the Android kernel; no specific vulnerable version ranges or fixed versions are provided in the supplied documents. The mate...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3202

Upstream security update. Follow RHBA-2017:3202 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3207

Upstream security update. Follow RHBA-2017:3207 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3206

Upstream security update. Follow RHBA-2017:3206 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3209

Upstream security update. Follow RHBA-2017:3209 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3201

Upstream security update. Follow RHBA-2017:3201 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3203

Upstream security update. Follow RHBA-2017:3203 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3205

Upstream security update. Follow RHBA-2017:3205 for details...

openSUSE Security Update : virtualbox (openSUSE-2017-1267)

This update for virtualbox fixes the following issues : - CVE-2017-10392: A local user can exploit a flaw in the Oracle VM VirtualBox Core component to partially access data, partially modify data, and deny service - CVE-2017-10407: A local user can exploit a flaw in the Oracle VM VirtualBox Core...

openSUSE Security Update : ansible (openSUSE-2017-1259)

This update for ansible to version 2.4.1.0 fixes the following vulnerabilities : - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment bsc1038785 - CVE-2016-9587: host to controller command execution vulnerability bsc1019021 - CVE-2016-8628: Command injection by...

OPENSUSE-SU-2017:2978-1 Security update for ansible

This update for ansible to version 2.4.1.0 fixes the following vulnerabilities: - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment bsc1038785 - CVE-2016-9587: host to controller command execution vulnerability bsc1019021 - CVE-2016-8628: Command injection by...

OPENSUSE-SU-2017:2984-1 Security update for redis

This update for redis to version 4.0.2 fixes the following issues: - CVE-2016-8339: CONFIG SET client-output-buffer-limit Code Execution Vulnerability boo1002351 The following upstream changes are included: - SLOWLOG now logs the offending client name and address - The modules native data types R...

jsc: Heap-buffer-overflow in JSC::WeakSet::vm

Detailed report: https://oss-fuzz.com/testcase?key=6450936961564672 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6230000038f8 Crash State: JSC::WeakSet::vm JSC::JSCell::structure JSC::JSValue::dumpInContext Sanitizer:...

gdal/gtiff_fuzzer: Crash in TIFFFillTile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6518095486124032 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff53c4aaa40 Cras...

libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference

Detailed report: https://oss-fuzz.com/testcase?key=4565444439572480 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: ScCompiler::IsReferen...

yara/rules_fuzzer: Use-of-uninitialized-value in _yr_atoms_choose

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5753694386651136 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gdal/cad_fuzzer: Stack-use-after-return in void SwapEndianness<long&, unsigned long>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5152401112694784 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...

yara/rules_fuzzer: Heap-double-free in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=6474914958671872 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-double-free Crash Address:...

[ASA-201711-15] lib32-openssl: multiple issues

Arch Linux Security Advisory ASA-201711-15 ========================================== Severity: Medium Date : 2017-11-08 CVE-ID : CVE-2017-3735 CVE-2017-3736 Package : lib32-openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-478 Summary ======= The package...

chakra: Dynamic-stack-buffer-overflow in Js::JavascriptArray::NewInstance

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6106023170408448 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7ffd13bb0260 Crash State:...