3991 matches found
Libmobi Information Disclosure Vulnerability (CNVD-2018-10876)
Libmobi is a C-based language for processing Kindle MOBI format e-book document library . A security vulnerability exists in the 'mobigetkf8boundaryseqnumber' function in the util.c file in Libmobi version 0.3. A remote attacker can exploit this vulnerability to disclose information heap-based...
CVE-2018-11248
util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal...
PT-2018-10425
Name of the Vulnerable Software and Affected Versions FileDownloader version 1.7.3 Description The issue concerns a directory traversal problem. An attacker can exploit this by placing "../" in a file name, allowing the file to be stored in an unintended directory. This occurs because the...
MGASA-2018-0237 Updated util-linux packages fix security vulnerability
A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability to mount a filesystem with custom mount points may execute arbitrary commands on behalf of the user who triggers the umount autocompletion CVE-2018-7738...
Updated util-linux packages fix security vulnerability
A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability to mount a filesystem with custom mount points may execute arbitrary commands on behalf of the user who triggers the umount autocompletion CVE-2018-7738...
libvirt security and bug fix update
3.9.0-14.el75.4 - lxc: Drop useless check in live device update rhbz1557922 - Pass oldDev to virDomainDefCompatibleDevice on device update rhbz1557922 - qemu: Fix updating device with boot order rhbz1557922 - conf: Fix crash in virDomainDefCompatibleDevice rhbz1557922 - vmx: check for...
Critical Photon OS Security Update - PHSA-2018-0037
Updates of 'linux-aws', 'mysql', 'paramiko', 'linux-secure', 'patch', 'python3', 'net-snmp', 'linux-esx', 'binutils', 'linux', 'mercurial', 'pycrypto', 'python2', 'util-linux', 'xerces-c', 'zsh', 'sqlite' packages of Photon OS have been released...
PT-2018-4474
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises when an RSA encryption operation is called in Android, specifically involving the ce util to unsigned bin function. This function incorrectly operates on th...
UBUNTU-CVE-2018-10186
In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...
CVE-2018-10186
In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...
PT-2018-9739
Name of the Vulnerable Software and Affected Versions: radare2 version 2.5.0 Description: The issue is a heap-based buffer over-read in the r hex bin2str function, located in libr/util/hex.c. This could allow remote attackers to cause a denial of service by providing a crafted DEX file...
tcpdump: heap-based buffer over-read in the lldp_print
tcpdump 4.9.0 has a heap-based buffer over-read in the lldpprint function in print-lldp.c, related to util-print.c...
CVE-2018-9165
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...
CVE-2018-9165
CVE-2018-9165 affects libming up to version 0.4.8, where pushdup does not perform a deep copy when a String is atop the stack. The result is a NULL pointer dereference in decompile.c (getName) that can cause a denial of service via a crafted SWF file. Connected advisories show vendor patches and ...
CVE-2018-9165
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...
CVE-2018-9165
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...
PT-2018-18901
Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue arises from the pushdup function in util/decompile.c, which fails to perform a deep copy of a String at the top of the stack when ActionPushDuplicate is executed. This oversight makes the...
CVE-2018-9165: NULL Pointer Dereference
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...
Fedora 27 : util-linux (2018-668664ba84)
Security fix for CVE-2018-7738 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora Update for util-linux FEDORA-2018-668664ba84
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...