Symantec Endpoint Encryption Denial of Service Vulnerability (CNVD-2017-36540)

Symantec Endpoint Encryption SEE is a suite of software from Symantec Corporation that provides advanced encryption and management capabilities for desktops, laptops, and removable storage devices. A security vulnerability exists in Symantec Endpoint Encryption in versions prior to SEE 11.1.3MP1...

libebml2 'EBML_BufferToID' function denial of service vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'EBMLBufferToID' function in the ebmlelement.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference an...

mkvalidator 'Node_GetData' Function Denial of Service Vulnerability

mkvalidator is a command line tool from the Matroska team for verifying that Matroska and WebM files are canonical. A security vulnerability exists in the 'NodeGetData' function in the corec/corec/node/node.c file in mkvalidator version 0.5.1. A remote attacker can exploit this vulnerability to...

Cesanta Mongoose MQTT Denial of Service Vulnerability

Cesanta Mongoose is a suite of embedded servers from Cesanta, Ireland. A denial of service vulnerability exists in the MQTT packet parsing feature in Cesanta Mongoose version 6.8. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference and server crash b...

Red Hat GlusterFS Denial of Service Vulnerability (CNVD-2017-32891)

Red Hat GlusterFS is an open source distributed file system from Red Hat. The system is a combination of different storage servers , these servers by the Ethernet or unlimited bandwidth technology Infiniband and remote direct memory access RDMA convergence , and ultimately the formation of a larg...

Google Android Denial of Service Vulnerability (CNVD-2017-35525)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the cmds/servicemanager/servicemanager.c file in Google Android. An attacker can exploit this vulnerability to cause a denial of service null...

GNU Libextractor Null Pointer Backreference Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORnsfextractmethod' function in the plugins/nsfextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to cau...

libcsoap nanohttp Denial of Service Vulnerability

libcsoap is a SOAP parsing and encapsulation code written in C. It contains simple HTTP server and client code. nanohttp is one of the HTTP servers. A denial of service vulnerability exists in nanohttp in libcsoap. A remote attacker can exploit this vulnerability to cause a denial of service null...

Linux kernel KEYS subsystem denial of service vulnerability (CNVD-2017-32223)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KEYS is one of the subsystems that returns all keys that match a pattern. A security vulnerability exists in the KEYS subsystem in Linux kernel 4.13.7 and earlier. A local attacker can...

GNU Libextractor Denial of Service Vulnerability (CNVD-2017-30423)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A denial of service vulnerability exists in the 'flacmetadata' function of the flacextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to cause a denial...

Google Android Qualcomm Camera Driver Denial of Service Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A denial of service vulnerability exists in the Google Android Qualcomm camera driver, which can be exploited by an attacker to cause a denial of service null pointer...

ImageMagick 'PDFDelegateMessage' function null pointer dereference vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'PDFDelegateMessage' function in the coders/pdf.c file in ImageMagick version...

ImageMagick 'AcquireResampleFilterThreadSet' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'AcquireResampleFilterThreadSet' function in the magick/resample-private.h file...

ImageMagick 'PostscriptDelegateMessage' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'PostscriptDelegateMessage' function in the coders/ps.c file in ImageMagick...

MP3Gain mpglibDBL Denial of Service Vulnerability

MP3Gain is a MP3 file volume adjustment application. mpglibDBL is one of the MPEG file decoders. A security vulnerability exists in the syncbuffer of the interface.c file of mpglibDBL in MP3Gain. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

ImageMagick Denial of Service Vulnerability (CNVD-2017-27286)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the DrawGetStrokeDashArray function of the wand/drawing-wand.c file in...

GraphicsMagick coders/pnm.c file denial of service vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in ReadPNMImage in the coders/pnm.c file in GraphicsMagick version 1.3.26. An attacker can exploit this vulnerability to caus...

Netwide Assembler (NASM) Integer Overflow Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. An integer overflow vulnerability exists in the preproc.c file in NASM version 2.14rc0. A remote attacker could exploit this vulnerability to cause a denial of service null pointer backreference...

FFmpeg 'av_color_primaries_name' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'avcolorprimariesname' function in the libavutil/pixdesc.c file in FFmpeg version 3.3.3. An attacker can exploit this vulnerability to cause a denial ...

ImageMagick Denial of Service Vulnerability (CNVD-2017-24321)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'IdentifyImage' function of the MagickCore/identify.c file in...