Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the hostpid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.
In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all o ...
Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than CVE-2017-14179.
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
Last updated 24 July 2024
Last updated 24 July 2024
Last updated 24 July 2024
ImageMagick 7.0.7-17 Q16 x8664 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in ...
In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found ...
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGIm ...
ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in ...
ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.
ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...
ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png ...
Last updated 24 July 2024
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...