Google Android media framework denial of service vulnerability (CNVD-2017-15979)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. A remote attacker can exploit this...

GNU PSPP 'll_insert()' Denial of Service Vulnerability

GNU PSPP is a free application developed by the GNU Project for data sampling, statistics and analysis. libpspplibrary is one of the C libraries. A security vulnerability exists in the libpspp library llinsert function in GNU PSPP version 0.10.5-pre2. An attacker can exploit this vulnerability wi...

libming util/outputtxt.c file denial of service vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A security vulnerability exists in the file util/outputtxt.c in libming version 0.4.8, which stems from the program not handling memory allocation correctly. A remote attacker can exploit this...

libming 'readEncUInt30' function denial of service vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readEncUInt30' function in the util/read.c file in libming version 0.4.8, which stems from a failure o...

ntopng 'NetworkInterface::getHost' function denial of service vulnerability

ntopng a.k.a. ntop is a new generation of cross-platform Web-based network traffic analysis and monitoring tools from the Italian company ntop. The tool supports automatic identification of useful information from the network, conversion of intercepted packets into an easily recognizable format a...

Apache HTTP Server Denial of Service Vulnerability (CNVD-2017-11802)

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in Apache httpd version 2.2.x prior to 2.2.33 and version 2.4.x prior to 2.4.26. An attacker can exploit this...

Libreswan Denial of Service Vulnerability (CNVD-2017-13245)

Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. A security vulnerability exists in Libreswan versions prior to 3.18. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

Unspecified Vulnerability in Google Android Qualcomm Component

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An unspecified vulnerability exists in the Google Android Qualcomm component. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

Poppler pdfunite Denial of Service Vulnerability

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. pdfunite is a Ruby wrapper. Poppler 0.17.3 after the version of pdfunite has a security vulnerability. An attacker can exploit this vulnerability with the help of specially crafted documentation to...

Linux kernel local denial of service vulnerability (CNVD-2017-08104)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'cryptoskcipherinittfm' function in the crypto/skcipher.c file in Linux kernel versions 4.11.2 and earlier. A local...

Cairo denial of service vulnerability

Cairo is a cross-platform open source vector graphics library developed by software developers Carl Worth and Behdad Esfahbod, which supports doing 2D drawings in multiple contexts and provides high-quality display and printouts. A denial of service vulnerability exists in Cairo version 1.15.4. A...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-07207)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A denial-of-service vulnerability exis...

lrzip denial of service vulnerability

lrzip Long Range ZIP is an open source compression utility for large files. A denial of service vulnerability exists in the 'bufRead::get' function in the libzpaq/libzpaq.h file of liblrzip.so in lrzip version 0.631. A remote attacker can exploit this vulnerability to cause a denial of service nu...

Oracle illumos denial of service vulnerability (CNVD-2017-05419)

Oracle OpenSolaris is an open source operating system project of Oracle Corporation Oracle, mainly used to establish a community of developers focusing on the Solaris operating system. illumos is a community development and maintenance branch of OpenSolaris. A security vulnerability exists in...

Linux kernel ULL Null Pointer Reference Elevation of Privilege Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KEYS is one of the subsystems that returns all keys that match a pattern. A security vulnerability exists in the KEYS subsystem in versions of Linux kernel prior to 3.18. A local attack...

Artifex Software MuJS Denial of Service Vulnerability (CNVD-2017-05277)

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A denial of service vulnerability exists in the regexp.c file in Artifex Software MuJS. An attacker can exploit this...

PoDoFo Denial of Service Vulnerability (CNVD-2017-02738)

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.4 version of the PdfParser.cpp file in the 'PoDoFo::PdfParser::ReadXRefSubsection' function has a security vulnerability. A remote attacker can exploit the vulnerability to cause a denial of service null...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexparsedebugitem' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

Samsung Exynos fimg2d driver for Android NULL pointer reference denial of service vulnerability

Samsung Exynos fimg2d driver for Android is a graphics device driver for Exynos chipset based on Android platform from Samsung, Korea. A security vulnerability exists in the Samsung Exynos fimg2d driver for Samsung phones using Android L 5.0/5.1 and M 6.0 versions. An attacker can exploit the...

Linux Kernel 'crypto/mcryptd.c' Denial of Service Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the crypto/mcryptd.c file in versions of Linux kernel prior to 4.8.15. A local attacker can exploit this vulnerability to cause a denial of...