CVE-2016-9424

CVE-2016-9424 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31. The issue is that w3m does not properly validate the value of a tag attribute, enabling a remote attacker to trigger a denial of service (heap buffer overflow) and potentially execute arbitrary code via a crafted HTML page. C...

CVE-2014-9424

Double free vulnerability in the sslparseclienthellousesrtpext function in d1srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake...

CVE-2014-9424

CVE-2014-9424 affects LibreSSL prior to 2.1.2. The vulnerability is a double-free in ssl_parse_clienthello_use_srtp_ext() within d1_srtp.c, which can trigger a length-verification error during DTLS handshake and may cause a denial of service (or unspecified impact). The issue is fixed by upgradin...