CVE-2014-9811

CVE-2014-9811 affects ImageMagick via the xwd file handler. The vulnerability allows remote attackers to trigger a denial of service (segmentation fault/application crash) by processing a crafted xwd file. Public documents in the connected set corroborate the existence of this issue and describe ...

CVE-2014-9819

CVE-2014-9819 affects ImageMagick with a heap-based buffer overflow in a palm file parsing path, enabling remote attackers to induce unspecified impact. Connected documents corroborate ImageMagick palm-file vectors but do not provide a concrete patch/version fixes; exploitation details are not sp...

CVE-2014-9807

CVE-2014-9807 concerns ImageMagick's pdb coder. The entry states that remote attackers can cause a denial of service via a double free, via unspecified vectors. The connected documents do not provide vendor/version specifics, exploitation status, or fixes. There is no patch information or remedia...

CVE-2014-9809

CVE-2014-9809 affects ImageMagick; the vulnerability allows remote attackers to cause a denial of service (segmentation fault/application crash) via a crafted xwd image. The provided connected documents corroborate the CVE in the ImageMagick context (e.g., Nessus/RHEL advisories listing CVE-2014-...

CVE-2014-9823

CVE-2014-9823 affects ImageMagick. The vulnerability is a heap-based buffer overflow triggered by a crafted palm file, with remote attackers having unspecified impact. The provided documents reiterate this vulnerability as distinct from CVE-2014-9819; no concrete patch/version remediation details...

CVE-2014-9816

CVE-2014-9816 : ImageMagick vulnerability where a crafted VIFF file can cause a denial of service via out-of-bounds access. Affected product: ImageMagick (VIFF handling). Root cause and version details are not specified in the provided documents. Impact: denial of service; no exploitation details...

CVE-2014-9806

CVE-2014-9806 affects ImageMagick. The vulnerability allows remote attackers to cause a denial of service via a crafted file, by consuming file descriptors. This is a DoS issue (availability impact) described in the public CVE entry; no additional remediation or exploitation details are provided ...

CVE-2014-9809

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image...

CVE-2014-9813

ImageMagick allows remote attackers to cause a denial of service application crash via a crafted viff file...

CVE-2014-9804

vision.c in ImageMagick allows remote attackers to cause a denial of service infinite loop via vectors related to "too many object."...

CVE-2014-9826

CVE-2014-9826 affects ImageMagick, via error handling in sun files. The vulnerability allows remote attackers to cause unspecified impact. The provided documents do not specify affected versions, vector details beyond “sun files” nor any patch/remediation information. No exploitation status is gi...

New Mirai Variant Roars into Action With 54 Hour DDoS Attacks

A variant of the Mirai malware pummeled a U.S. college last month with a marathon 54-hour long attack. Researchers say this latest Mirai variant is a more potent version of the notorious Mirai malware that made headlines in October, targeting DNS provider Dyn and the Krebs on Security website. Th...

Oracle Linux 6 : glibc (ELSA-2017-0680)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0680 advisory. - Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function 1358015. - Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreater...

CVE-2014-3582

Affected product: Apache Ambari. Affects Ambari server handling of SSL certificate generation for hosts in a cluster (versions 1.2.0–2.2.2). Root cause (as described): the CVE-2014-3582 condition may allow arbitrary system command execution on the Ambari Server host during the certificate generat...

UBUNTU-CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VLC media player, affected up to versions before 2.1.5, is affected by CVE-2014-6440 due to a heap overflow in the transcode module that could allow remote code execution or a denial of service. Public references in OpenVAS/Gentoo advisories confirm a heap-based overflow/remote code execution vec...

CentOS 6 : glibc (CESA-2017:0680)

An update for glibc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...