Lucene search
+L

3180 matches found

OSV
OSV
added 2017/11/29 6:29 p.m.3 views

DEBIAN-CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS9.6AI score0.03995EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.4 views

ALPINE-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS8.1AI score0.08523EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.3 views

DEBIAN-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS10AI score0.08523EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.30 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS10AI score0.08523EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2017/11/29 6:0 p.m.27 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

7.9AI score0.08523EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2017/11/29 6:0 p.m.85 views

CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS9.9AI score0.03995EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/11/29 6:0 p.m.72 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS8.2AI score0.08523EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2017/11/29 6:0 p.m.46 views

CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS10AI score0.03995EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2017/11/29 6:0 p.m.51 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS9.7AI score0.08523EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2017/11/29 11:20 a.m.49 views

CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS6.9AI score0.03995EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/29 8:0 a.m.12 views

CURL-CVE-2017-8818 SSL out of buffer access

libcurl contains an out boundary access flaw in SSL related code. When allocating memory for a connection the internal struct called connectdata, a certain amount of memory is allocated at the end of the struct to be used for SSL related structs. Those structs are used by the particular SSL libra...

9.8CVSS9.2AI score0.03995EPSS
SaveExploits0
curl security advisories
curl security advisories
added 2017/11/29 8:0 a.m.10 views

SSL out of buffer access

libcurl contains an out boundary access flaw in SSL related code. When allocating memory for a connection the internal struct called connectdata, a certain amount of memory is allocated at the end of the struct to be used for SSL related structs. Those structs are used by the particular SSL libra...

9.8CVSS8.1AI score0.03995EPSS
SaveExploits0Affected Software2
OSV
OSV
added 2017/11/29 12:0 a.m.3 views

UBUNTU-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS7AI score0.08523EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2017/11/28 12:0 a.m.61 views

Debian: Security Advisory (DSA-4051-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.11175EPSS
SaveExploits0References4
0day.today
0day.today
added 2017/11/26 12:0 a.m.31 views

Microsoft Windows win32kfull!GreUpdateSpriteInternal Kernel Stack Memory Disclosure Exploit

On Windows 10 32-bit version 1709, a kernel stack memory disclosure was discovered in win32kfull!GreUpdateSpriteInternal. Windows Kernel stack memory disclosure in win32kfull!GreUpdateSpriteInternal On Windows 10 32-bit version 1709, we have discovered a disclosure of 4 uninitialized bytes from t...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2017/11/17 12:0 a.m.8 views

GNU Binutils Denial of Service Vulnerability (CNVD-2017-34504)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in GNU Binutils 2.29.1. The vulnerability arises because the printgnupropertynote function in readelf.c in...

7.8CVSS7.2AI score0.02201EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/11/15 8:29 a.m.26 views

CVE-2017-16830

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

7.8CVSS6.9AI score0.02201EPSS
SaveExploits1References1
Prion
Prion
added 2017/11/15 8:29 a.m.19 views

Integer overflow

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

6.8CVSS7.8AI score0.02201EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2017/11/15 8:29 a.m.17 views

CVE-2017-16830

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

7.8CVSS7.4AI score
SaveExploits0References4
Symantec
Symantec
added 2017/11/14 12:0 a.m.51 views

Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability

Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Exc...

9.3CVSS1AI score0.09494EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder