Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests.
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was fou ...
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in Im ...
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
Last updated 24 July 2024
Last updated 24 July 2024
A race condition vulnerability was found in packetsetring that can lead to use after free on a function pointer. This vulnerability can be used to gain kernel code execution for the local attacker capable of creating AFPACKET sockets. This issue was introduced with following commit:
https://github.com/torvalds/linux/commit/f6fb8f100b807378fda19e83e5ac6828b638603a
An integer overflow vulnerability was found in xtalloctableinfo, which on 32-bit systems can lead to small structure allocation and a copyfromuser based heap corruption.
Proposed fix:
patch v1 message: http://marc.info/?l=netfilter-devel&m=145757136822750&w=2 patch v1 thread: http://marc.info/?t=145757149700001&r=1&w=2
patch v2 message: http://marc.info/?l=netfilter-devel&m=145800533813758&w=2 (in netfilter-devel) patch v2 message: http://marc.info/?l=linux-netdev&m=145800538413781&w=2 (in linux-netdev)
CVE request and assignment:
http://seclists.org/oss-sec/2016/q1/581 http://seclists.org/oss-sec/2016/q1/619
Last updated 24 July 2024
It was discovered that the glibc DNS resolver dereferenced a NULL pointer when processing a specific, but valid resource record type.
Acknowledgements:
Name: Florian Weimer (Red Hat Product Security)
Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
A cache-related side channel was found in nettle's RSA and DSA decryption code. An attacker could use this flaw to recover the private key, from a co-located virtual-machine instance.
References:
https://eprint.iacr.org/2016/596.pdf https://git.lysator.liu.se/nettle/nettle/commit/3fe1d6549765ecfb24f0b80b2ed086fdc818bff3
A flaw was found in the Linux kernels implementation of BPF in which systems with more than 32GB of physical memory and unlimited RLIMITMEMLOCK settings an application can overflow a 32 bit refcount.
Additionally in the same environment, malicious applications can overflow a map refcount on larger memory (1Tb). When the overflow wraps to zero a reference can be held while being free'd. This can lead to a use after free
CVE assignment:
http://seclists.org/oss-sec/2016/q2/266
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92117d8443bc5afacc8d5ba82e541946310f106e
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file.
A flaw was found in ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
References: https://github.com/ImageMagick/ImageMagick/issues/1054
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file.
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.
Last updated 24 July 2024
Last updated 24 July 2024