CVE-2015-5362: Undefined Security Weakness

The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before...

CVE-2014-9660

The bdfparseglyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted BDF font...

CVE-2014-8738

The bfdslurpextendednametable function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service invalid write, segmentation fault, and crash via a crafted extended name table in an archive...

CVE-2014-8738: Improper Restriction of Operations within the Bounds of a Memory Buffer

The bfdslurpextendednametable function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service invalid write, segmentation fault, and crash via a crafted extended name table in an archive...

CVE-2014-8504

Stack-based buffer overflow in the srecscan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted file...

CVE-2014-8485

The setupgroup function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted section group headers in an ELF file...

CVE-2014-8501

The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable...

CVE-2014-8485

The setupgroup function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted section group headers in an ELF file...

CVE-2014-8484

The srecscan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service out-of-bounds read via a small S-record...

CVE-2014-8503: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ihexscan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service crash and possibly have other unspecified impact via a crafted ihex file...

CVE-2014-8484: Improper Restriction of Operations within the Bounds of a Memory Buffer

The srecscan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service out-of-bounds read via a small S-record...

CVE-2014-8501: Improper Restriction of Operations within the Bounds of a Memory Buffer

The bfdXXiswapaouthdrin function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service out-of-bounds write and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable...

MGASA-2014-0346 Updated sdcc packages fix a security vulnerability

Integer overflow, leading to heap-buffer overflow by processing certain file headers via bfd binary. CVE-2012-3509 A nonfree package is also now available, which provides components that cannot be included in the core repository. In addition, this update obsoletes sdcc2.9, which is old and probab...

Cisco IOS Software远程拒绝服务漏洞

Bugtraq ID:66515 CVE ID:CVE-2014-2131 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 攻击者可以发送特殊的Virtual Switching Systems VSS或Bidirectional Forwarding Detection BFD报文给受影响设备，可导致拒绝服务攻击。 0 Cisco IOS 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131...

Cisco IOS Software High Priority Queue Denial of Service Vulnerability

A vulnerability in the packet driver code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device, resulting in a denial of service DoS condition. The vulnerability is due to how the packet driver code handles packets that belong to protocols...

CVE-2014-2131

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

Code injection

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

CVE-2014-2131

Summary of the vulnerability (CVE-2014-2131). The Cisco IOS packet driver has a DoS flaw triggered by handling certain VSS/BFD traffic, enabling an unauthenticated, adjacent attacker to cause a device reload. The root cause is in the packet driver code that processes high-priority-queue protocols...

PT-2014-4496

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a series of Virtual Switching Systems VSS or Bidirectional Forwarding Detection BFD...

PT-2014-8553

Name of the Vulnerable Software and Affected Versions GNU binutils versions prior to 2.25 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing a small S-record. This is due to a problem in the srec scan function located in...