Archive
31 December 2018
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
High 7.5
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circula…
-
High 7.5
folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in …
-
High 7.5
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulne…
-
High 7.5
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This aff…
-
High 7.5
Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of ser…
-
High 8.1
The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires co…
-
High 7.8
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing check…
-
High 7.5
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to…
-
High 8.1
The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmw…
-
High 8.1
The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version param…
-
High 8.8
ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.