68 matches found
RHEL 8 : thunderbird (RHSA-2020:0919)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0919 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.6.0. Security Fixes: Mozilla:...
Debian DSA-4645-1 : chromium - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-20503 Natalie Silvanovich discovered an out-of-bounds read issue in the usrsctp library. - CVE-2020-6422 David Manouchehri discovered a use-after-free issue in the WebGL implementation. - CVE-2020-6424 Sergei...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
RHEL 6 : firefox (RHSA-2020:0816)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0816 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp buffer overflow vulnerability
usrsctp is a user-level SCTP Stream Control Transmission Protocol stack with multi-platform support. A buffer overflow vulnerability exists in sctploadaddressesfrominit in versions of usrsctp prior to 2019-12-20. The vulnerability stems from a network system or product performing operations in...
CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
DEBIAN-CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
AZL-35345 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
AZL-9920 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
CVE-2019-20504
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. Remediation A fix was pushed into the master branch but not yet published. References - Chromium Bugs - GitHub Commit...
Out-of-bounds
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
UBUNTU-CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
CVE-2019-20503
CVE-2019-20503 is an out-of-bounds read in usrsctp’s sctp_load_addresses_from_init. Connected documents confirm affected components (libusrsctp/usrsctp) and indicate versions prior to 0.9.5.0-1 are vulnerable (Mariner packages). A patched version (0.9.5.0-1 or later) is available, per CBLMariner ...
