oss-security mailing list - 2018/12

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2018/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	² 2
³ 2	⁴ 1	⁵ 2	⁶ 1	⁷ 3	⁸ 2	⁹
¹⁰ 9	¹¹ 2	¹² 13	¹³ 14	¹⁴ 9	¹⁵	¹⁶
¹⁷ 1	¹⁸ 7	¹⁹ 7	²⁰	²¹ 1	²² 2	²³ 2
²⁴	²⁵	²⁶	²⁷	²⁸	²⁹	³⁰ 1
³¹ 3

Messages by day:

December 2 (2 messages)

Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Dhiraj Mishra <mishra.dhiraj95@...il.com>)
Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Wei Wu <ww9210@...il.com>)

December 3 (2 messages)

UAF write in usb_audio_probe (Mathias Payer <mathias.payer@...elwelt.net>)
PolicyKit: CVE-2018-19788: Improper handling of user with uid > INT_MAX leading to authentication bypass (Salvatore Bonaccorso <carnil@...ian.org>)

December 4 (1 message)

Re: UAF write in usb_audio_probe (Marcus Meissner <meissner@...e.de>)

December 5 (2 messages)

Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: PHP imap_open() script injection (sjw@....ch)

December 6 (1 message)

CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP) (P J P <ppandit@...hat.com>)

December 7 (3 messages)

[ANNOUNCE] Apache Ignite 2.7.0 Vulnerable Dependecies Updates (Dmitriy Pavlov <dpavlov@...che.org>)
Enigmail XSA issue with WKD and HTTP authentication (Hanno Böck <hanno@...eck.de>)
Invalid free in cairo_ft_apply_variations (Michael Catanzaro <mcatanzaro@...lia.com>)

December 8 (2 messages)

mpg321: Out-of-bounds Write (Ren Kimura <rkx1209dev@...il.com>)
Re: mpg321: Out-of-bounds Write (Matthew Fernandez <matthew.fernandez@...il.com>)

December 10 (9 messages)

Re: Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: Script sandbox bypass in multiple Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Re: Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: mpg321: Out-of-bounds Write (Ren Kimura <rkx1209dev@...il.com>)
libvnc and tightvnc vulnerabilities (Pavel Cheremushkin <Pavel.Cheremushkin@...persky.com>)
Re: libvnc and tightvnc vulnerabilities (Solar Designer <solar@...nwall.com>)
RE: libvnc and tightvnc vulnerabilities (Pavel Cheremushkin <Pavel.Cheremushkin@...persky.com>)
Re: libvnc and tightvnc vulnerabilities (Solar Designer <solar@...nwall.com>)
Re: mpg321: Out-of-bounds Write (Ren Kimura <rkx1209dev@...il.com>)

December 11 (2 messages)

Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Re: Multiple telnet.c overflows (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 12 (13 messages)

Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Jann Horn <jannh@...gle.com>)
Singularity: CVE-2018-19295: local root exploit - unprivileged users can join arbitrary mnt, net, pid and ipc namespaces (Matthias Gerstner <mgerstner@...e.de>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Salva Peiró <speirofr@...il.com>)
Re: CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Solar Designer <solar@...nwall.com>)
Re: CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Multiple telnet.c overflows (Tavis Ormandy <taviso@...gle.com>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Re: Multiple telnet.c overflows (Tavis Ormandy <taviso@...gle.com>)
Re: Multiple telnet.c overflows (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Re: Multiple telnet.c overflows (Tavis Ormandy <taviso@...gle.com>)
Re: Multiple telnet.c overflows (Tavis Ormandy <taviso@...gle.com>)

December 13 (14 messages)

Re: Multiple telnet.c overflows (Tavis Ormandy <taviso@...gle.com>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Re: CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Salva Peiró <speirofr@...il.com>)
CVE-2018-20123 QEMU: pvrdma: memory leakage in device hotplug (P J P <ppandit@...hat.com>)
Re: CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Solar Designer <solar@...nwall.com>)
Re: libvnc and tightvnc vulnerabilities (Solar Designer <solar@...nwall.com>)
Re: CVE Request: mini-httpd (<= v1.30) is affected by a response discrepancy information exposure (CWE-204) (Salva Peiró <speirofr@...il.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Greg KH <greg@...ah.com>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
CVE-2018-16872 Qemu: usb-mtp: path traversal by host filesystem manipulation in Media Transfer Protocol (MTP) (P J P <ppandit@...hat.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Yves-Alexis Perez <corsac@...ian.org>)
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0009 (Michael Catanzaro <mcatanzaro@...lia.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file (Nicholas Luedtke <nicholas.luedtke@...lumni.com>)

December 14 (9 messages)

Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Brad Spengler <spender@...ecurity.net>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Jann Horn <jannhorn@...glemail.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397; since 4.11; fixed in 4.14.87 and 4.19.7) (Solar Designer <solar@...nwall.com>)
Re: Multiple telnet.c overflows (Hacker Fantastic <hackerfantastic@...glemail.com>)
Go security releases 1.11.3 and 1.10.6 (Dmitri Shuralyov <dmitshur@...ang.org>)

December 17 (1 message)

Apache CouchDB CVE-2018-17188: Remote Privilege Escalations (Affects all versions < 2.3.0) (Jan Lehnardt <jan@...che.org>)

December 18 (7 messages)

CVE-2018-20191 QEMU: pvrdma: uar_read leads to NULL dereference (P J P <ppandit@...hat.com>)
CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array (P J P <ppandit@...hat.com>)
Re: CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array (saar amar <saaramar5@...il.com>)
Re: Re: CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array (Agostino Sarubbo <ago@...too.org>)
Re: CVE-2018-20124 QEMU: rdma: OOB access when building scatter-gather array (P J P <ppandit@...hat.com>)
CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing (P J P <ppandit@...hat.com>)
Re: CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing (Alex Gaynor <alex.gaynor@...il.com>)

December 19 (7 messages)

Re: CVE-2018-16882 Kernel: KVM: nVMX: use after free in posted interrupt processing (P J P <ppandit@...hat.com>)
CVE-2018-20216 QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv (P J P <ppandit@...hat.com>)
CVE-2018-20125 QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ (P J P <ppandit@...hat.com>)
CVE-2018-20126 QEMU: pvrdma: memory leakage when creating cq/qp (P J P <ppandit@...hat.com>)
CVE-2018-16884: Linux kernel: nfs: use-after-free in svc_process_common() (Vladis Dronov <vdronov@...hat.com>)
Additional context information about RedHat's announcement of CVE-2018-5742 (ISC Security Officer <security-officer@....org>)
[CVE-2018-11799] Apache Oozie security vulnerability (Gézapeti Cseh <gezapeti@...che.org>)

December 21 (1 message)

sqlite: CVE-2018-20346: integer overflow (resulting in buffer overflow) for FTS3 queries (Salvatore Bonaccorso <carnil@...ian.org>)

December 22 (2 messages)

CVE-2018-6954: systemd-tmpfiles root privilege escalation by following non-terminal symlinks (Michael Orlitzky <michael@...itzky.com>)
[CVE-2018-17197] Apache Tika Denial of Service -- Infinite Loop in Tika's SQLite3Parser (Tim Allison <tallison@...che.org>)

December 23 (2 messages)

Use after free in syslog-ng / affile_dw_reap() (Hanno Böck <hanno@...eck.de>)
Use after free in monit / _handleEvent (Hanno Böck <hanno@...eck.de>)

December 30 (1 message)

[CVE-2018-17191] Apache NetBeans 9.0 Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command exe… (Matthias Bläsing <mblaesing@...pel-hel…)

December 31 (3 messages)

Asserts considered harmful (or GMP spills its sensitive information) (Jeffrey Walton <noloader@...il.com>)
Re: Asserts considered harmful (or GMP spills its sensitive information) (Vincent Lefevre <vincent@...c17.net>)
Re: Asserts considered harmful (or GMP spills its sensitive information) (Jeffrey Walton <noloader@...il.com>)

84 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.