CVE-2015-2688

bufpullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...

DEBIAN-CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2167

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...

CVE-2013-2166

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

PT-2019-6881 · Openstack · Python-Keystoneclient

Name of the Vulnerable Software and Affected Versions: python-keystoneclient versions 0.2.3 through 0.2.5 Description: The issue concerns a middleware memcache encryption bypass in the python-keystoneclient. No information is provided about the estimated number of potentially affected devices or...

md4c buffer overflow vulnerability (CNVD-2018-15762)

md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdisnamedentitycontents' function in md4c version 0.2.5. An attacker could exploit this vulnerability to cause a heap-based buffer out-of-bounds read...

CVE-2018-11546

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11545

md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...

CVE-2018-11546

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2017-11590

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11590

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

DEBIAN-CVE-2017-11590

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11590

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

Null pointer dereference

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11590

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11590

CVE-2017-11590 affects libgxps 0.2.5 due to a NULL pointer dereference in the caseless_hash function (gxps-archive.c). A crafted input may cause remote denial of service. The CVSS metrics in the initial entry indicate 4.3 (CVSS v2) and 7.5 (CVSS v3) with NETWORK access, low complexity and no user...

libgxps 'caseless_hash' function denial of service vulnerability

libgxps is a library for processing XPS documents based on GObject a C-based framework. A security vulnerability exists in the 'caselesshash' function in the gxps-archive.c file in libgxps version 0.2.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a deni...