CVE-2017-6851

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

CVE-2017-6851

JasPer 2.0.10 is affected by CVE-2017-6851 via jas_matrix_bindsub in jas_seq.c, allowing a crafted image to trigger a denial of service (invalid read). The connected advisories (MGASA-2020-0337 and OSV-Managed pages) enumerate multiple Jasper CVEs and indicate fixes in updated Jasper packages; re...

PT-2017-17367 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue allows remote attackers to cause a denial of service via a crafted file. This is due to an invalid read in the ColorChanger::GetColorFromStack function in colorchanger.cpp. Recommendations: For PoDo...

DEBIAN-CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...

UBUNTU-CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...

CVE-2017-6307

CVE-2017-6307 affects the tnef project (MS-TNEF MIME unpacker). The issue is two out-of-bounds writes in mapi_attr_read() (src/mapi_attr.c) that could lead to invalid read/write operations, with the advisory stating vulnerable versions up to 1.4.13 and fixes delivered in newer releases. Fedora an...

F5 Networks BIG-IP : libarchive vulnerability (K35263486)

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

DEBIAN-CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

UBUNTU-CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

UBUNTU-CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

DEBIAN-CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CVE-2016-1504

The CVE-2016-1504 entry concerns the dhcpcd DHCP client before version 6.10.0. The vulnerability arises from handling of DHCP option length, enabling remote attackers to trigger an invalid read and crash (Denial of Service). Impact is described as a crash/DoS with network-originated packets; expl...

CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

CVE-2016-5321

The CVE-2016-5321 entry concerns LibTIFF DumpModeDecode (libtiff

UBUNTU-CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:0211-1)

This update for gstreamer-plugins-base fixes the following issues : - CVE-2016-9811: Malicious file could could cause an invalid read leading to crash bsc1013669 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES11 Security Update : php53 (SUSE-SU-2017:0109-1)

This update for php53 fixes the following issues : - CVE-2014-9912: Stack-based buffer overflow in ulocgetDisplayName bsc1012232 - CVE-2016-9933: Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934: Dereference from NULL pointer could lead to crash bsc1015188 -...

SUSE-SU-2017:0017-1 Security update for php7

This update for php7 fixes the following issues: CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 CVE-2016-9935 Invalid read could lead to crash bsc1015189 CVE-2016-9936 Use After free in the...