CVE-2017-7301

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an aoutlinkaddsymbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker ld program crash...

DEBIAN-CVE-2017-7300

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an aoutlinkaddsymbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read off-by-one because of an incomplete check for invalid string offsets while loading symbols, leading to a GN...

Buffer overflow

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an aoutlinkaddsymbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker ld program crash...

Heap overflow

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has an aoutlinkaddsymbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read off-by-one because of an incomplete check for invalid string offsets while loading symbols, leading to a GN...

CVE-2016-10253

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the...

CVE-2015-8981

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to moffsets.size...

ALPINE-CVE-2017-6312

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...

DEBIAN-CVE-2017-6473

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets...

AZL-7268 CVE-2017-5835 affecting package libplist 2.1.0-4

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

DEBIAN-CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

AZL-36955 CVE-2017-5835 affecting package libplist 2.7.0-1

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

Design/Logic Flaw

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero. Remediation There is no fixed version for libplist. References - GitHub Is...

UBUNTU-CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

CVE-2017-5835

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

CVE-2017-5835: Allocation of Resources Without Limits or Throttling

libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of zero...

PT-2017-16700

Name of the Vulnerable Software and Affected Versions libplist affected versions not specified Description The issue allows attackers to cause a denial of service, resulting in large memory allocation and a crash. This can be achieved through vectors involving an offset size of zero. There is no...