782 matches found
CCN-lite 'cnb_parse_lev' Function Denial of Service Vulnerability
CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the 'cnbparselev' function in CCN-lite versions prior to 2.00. An attacker could exploit this vulnerability to cause an invalid read...
Out-of-bounds
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
CVE-2017-12471
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
CVE-2017-12471
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
CVE-2017-12471
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
CVE-2017-12471
The CVE-2017-12471 issue concerns CCN-lite's cnb_parse_lev function. Multiple connected sources describe a vulnerability in CCN-lite versions prior to 2.00 where failure to check for out-of-bounds conditions enables an invalid read in the hexdump path, reported as a denial-of-service risk. Techni...
CVE-2017-12471: Improper Restriction of Operations within the Bounds of a Memory Buffer
The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...
PT-2018-5410
Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to the cnb parse lev function, which fails to check for out-of-bounds conditions. This failure triggers an invalid read in the hexdump function, allowing context-dependent...
Libav, FFmpeg and Google Chromium Denial of Service Vulnerabilities
Libav formerly FFmpeg is a cross-platform audio and video recording and conversion solution from the Libav team.FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team.Google Chromium is a web browser developed by Google Inc. Google Chromium is ...
MGASA-2018-0032 Updated OpenEXR packages fix security vulnerability
In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash CVE-2017-9110. In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash CVE-2017-9112. In OpenEXR 2.2.0, an invali...
CVE-2017-16910
An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...
Libraw 0.18.5 Denial Of Service Vulnerability
Libraw version 0.8.15 suffers from a denial of service vulnerability. ====================================================================== LibRaw Multiple Denial of Service Vulnerabilities ====================================================================== Table of Contents Affected...
shopify-scripts: Invalid read leading to a segfault
PoC === The attached POC demonstrates invalid reads leading to a segfault. Debug info ========== gdb report: 423│ dispatchlinkedcodegenscope s, int pc 424│ 425│ mrbcode i; 426│ int pos; 427│ 428│ if !pc return; 429│ for ;; 430├─── i = s-iseqpc; gdb p pc $1 = -32730 valgrind report: ==21952==...
radare2 denial of service vulnerability (CNVD-2017-36110)
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the libr/bin/dwarf.c file in radare2 version 2.0.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and application crash with the help of a special...
CVE-2017-16805
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...
CVE-2017-16805
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...
Design/Logic Flaw
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...
CVE-2017-16805
radare2 2.0.1 is affected by CVE-2017-16805 due to a flaw in libr/bin/dwarf.c (r_bin_dwarf_parse_comp_unit) and sdb_set_internal in shlr/sdb/src/sdb.c that allows remote attackers to trigger an invalid read and crash the application via a crafted ELF file. Impact is denial of service; no patch/ve...
FreeBSD : sam2p -- multiple issues (43a1b8f9-3451-4f3c-b4fc-730c0f5876c1)
sam2p developers report : In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp. In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. In sam2p...