PT-2019-4118 · Roy Marples +1 · Dhcpcd +1

Name of the Vulnerable Software and Affected Versions: dhcpcd versions 6.11.7 and earlier, 7.x before 7.2.2 Description: The issue is related to a buffer over-read in the D6 OPTION PD EXCLUDE feature of the dhcp6.c component in the dhcpcd DHCP server. This can be exploited by a remote attacker to...

UBUNTU-CVE-2019-11036

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exifprocessIFDTAG function. This may lead to information disclosure or crash...

Denial Of Service (DoS)

Apache httpd is vulnerable to denial of serviceDoS attacks. A remote user could send a specially crafted sequence of request headers to trigger a buffer overread error in apfindtoken and cause a segmentation fault which leads application to a crash...

Denial Of Service (DoS)

Apache httpd is vulnerable to denial of serviceDoS attacks. This occurs in modmime when sending a specially crafted Content-Type response header which leads to buffer overread , resulting in a potentially exploitable crash...

Denial Of Service (DoS)

krb5 is vulnerable to denial of service DoS. The vulnerability exists through a buffer overread issue when injected with invalid tokens into the GSSAPI application session...

DEBIAN-CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program...

UBUNTU-CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program...

ALPINE-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

DEBIAN-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

ALPINE-CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

Buffer Over-read

Overview mqtt-packet is an Encoder and Decoder for MQTT. Affected versions of this package are vulnerable to Buffer Over-read. An attacker could trigger an out of range read on a buffer which throws a RangeError. MQTT Brokers using this module could be forced to crash by sending a specifically...

The vulnerability of the `check_group` function in the elflint.c library of the ELF file modification and analysis utility Elfutils, related to the occurrence of operations outside the buffer’s boundaries, allows a malicious actor to trigger a service failure.

The vulnerability of the checkgroup function in the elflint.c library of the ELF file modification and analysis utility Elfutils relates to the execution of a read operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure through...

The vulnerability of the xmlrpc_decode() function, a part of the XMLRPC interpreter for the PHP programming language, relates to the reading of data beyond the buffer memory boundary, allowing attackers to gain access to confidential data.

The vulnerability of the xmlrpcDecode function in the PHP programming language is related to an error that causes memory access beyond the allocated range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the rdesktop RDP client file, related to reading beyond the buffer boundary, allows a hacker to cause a service failure.

The vulnerability of the RDP client rdesktop mcs.c is related to reading data beyond the buffer boundary. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the PHP interpreter’s read function, related to reading beyond the boundaries of memory buffers, allows attackers to cause service failures, violate data confidentiality, and compromise the integrity of protected data.

The vulnerability of the PHP language interpreter’s read function is related to the rereading of buffers based on queues. Exploiting this vulnerability can allow attackers to cause service failures, violate the confidentiality and integrity of protected data by reading memory allocated to specifi...

The vulnerability of the RDP client rdesktop, related to reading beyond the buffer boundary, allows an attacker to cause a service failure.

The vulnerability of the RDP client rdesktop secure.c relates to reading data beyond the buffer boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the xml_elem_parse_buf() function in the PHP programming language lies in its ability to read data beyond the boundaries of the memory buffer, allowing an attacker to gain unauthorized access to protected data.

The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

The vulnerability of the process_demand_active function in the RDP client rdesktop, related to reading beyond the buffer limit, allows a hacker to cause service failure.

The vulnerability of the processdemandactive function in the RDP client rdesktop is related to reading data beyond the buffer boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ALPINE-CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

DEBIAN-CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...