6372 matches found
UBUNTU-CVE-2017-12967
The getsym function in tekhex.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a malformed tekhex binary...
PYSEC-2017-129
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service...
The vulnerability of the bmp2tiff component in the LibTIFF library allows a hacker to gain access to data beyond the buffer boundaries allocated in dynamic memory.
The vulnerability of the bmp2tiff component in the LibTIFF library arises from insufficient checking of the input parameters biWidth and biHeight in the bitmap-information header of the BMP image. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data beyo...
UBUNTU-CVE-2017-12933
The finishnesteddata function in ext/standard/varunserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP...
httpd: mod_mime buffer overread
A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...
httpd: ap_find_token() buffer overread
A buffer over-read flaw was found in the httpd's apfindtoken function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request...
Oracle Linux 6 : httpd (ELSA-2017-2478)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2478 advisory. - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer...
Oracle Linux 7 : httpd (ELSA-2017-2479)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2479 advisory. - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer...
httpd: mod_mime buffer overread
A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...
httpd: ap_find_token() buffer overread
A buffer over-read flaw was found in the httpd's apfindtoken function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request...
httpd: mod_mime buffer overread
A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...
httpd security update
2.2.15-60.0.1.5 - replace index.html with Oracle's index page oracleindex.html - update vstring in specfile 2.2.15-60.5 - Resolves: 1463194 - CVE-2017-3167 httpd: apgetbasicauthpw authentication bypass - Resolves: 1463197 - CVE-2017-3169 httpd: modssl NULL pointer dereference - Resolves: 1463207 ...
The vulnerability of the dnxhddecode_header function in the libavcodec/dnxhddec.c multimedia library of FFmpeg allows a attacker to cause a service failure or exert other effects.
The vulnerability of the dnxhddecodeheader function in the libavcodec/dnxhddec.c multimedia library of FFmpeg relates to reading data beyond the specified buffer boundaries. Exploiting this vulnerability may allow a malicious actor to cause service failure access outside the array or other effect...
AZL-69695 CVE-2017-12596 affecting package OpenEXR 2.3.0-6
In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...
openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function
An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...
freeradius: Buffer over-read in fr_dhcp_decode_suboptions()
An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request...
dnsmasq: Improper bounds checking leads to a buffer overread
Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491...
CVE-2017-11116
The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...
libming 'OpCode' function denial of service vulnerability (CNVD-2017-20196)
libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. The OpCode function called from isLogicalOp and decompileIF in util/decompile.c in Libming suffers from a heap-based buffer over-reading problem that allows an attacker to cause a denial of service via...