8981 matches found
DEBIAN-CVE-2017-5840
The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...
PT-2017-16710
Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is achieved through vectors involving PSM parsing,...
UBUNTU-CVE-2017-5840
The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...
DEBIAN-CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
ALPINE-CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
PT-2017-9420
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0 Description The issue is related to a buffer overflow in the Juniper PPPoE ATM parser, specifically in the juniper parse header function within print-juniper.c. This overflow can occur in versions of tcpdump...
UBUNTU-CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...
UBUNTU-CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
PT-2017-2398
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.30 PHP versions 7.0.x prior to 7.0.15 Description The issue is related to an off-by-one error in the phar parse pharfile function. This error can be exploited by remote attackers to cause a denial of service memory...
DEBIAN-CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
UBUNTU-CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
PT-2017-4098
Name of the Vulnerable Software and Affected Versions uglify-js versions prior to 2.6.0 Description The issue allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, also known as a "regular expression denial of service ReDoS". This can be exploited by...
libass: Attempting free in parse_events
Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5420800962199552 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...
PT-2017-4051
Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue is related to the gst avi demux parse ncdt function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service due to a...
DEBIAN-CVE-2016-9813
The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...
ALPINE-CVE-2016-9809
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...