4322 matches found
UBUNTU-CVE-2017-5029
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of...
UBUNTU-CVE-2017-5852
The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service infinite loop via a crafted file...
OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)
It was discovered that the Libraries component of OpenJDK did not validate the length of the object identifier read from the DER input before allocating memory to store the OID. An attacker able to make a Java application decode a specially crafted DER input could cause the application to consume...
Debian DSA-3793-1 : shadow - security update
Several vulnerabilities were discovered in the shadow suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-6252 An integer overflow vulnerability was discovered, potentially allowing a local user to escalate privileges via crafted input to the...
libdwarf 'dwarf_line_table_reader_common.c' Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A denial of service vulnerability exists in libdwarf 'dwarflinetablereadercommon.c'. A remote attacker can cause a denial of service out-of-bounds read with specially crafted input...
DEBIAN-CVE-2016-7510
The readlinetableprogram function in dwarflinetablereadercommon.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted input...
UBUNTU-CVE-2016-7510
The readlinetableprogram function in dwarflinetablereadercommon.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted input...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
UBUNTU-CVE-2016-5032
The dwarfgetxuhashentry function in libdwarf before 20160923 allows remote attackers to cause a denial of service crash via a crafted file...
Out-of-bounds
The readlinetableprogram function in dwarflinetablereadercommon.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted input...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
DEBIAN-CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
Tcpdump IPv6 Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. Tcpdump IPv6 parser print-ip6.c:ip6print suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...
UBUNTU-CVE-2016-5826
The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
CVE-2015-8858
The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...
Persistent Cross-site Scripting (XSS)
ghost is vulnerable to persistent cross-site scripting XSS. This is because it fails to sanitize user data, thus making it possible for an attacker to supply crafted input in order to harm third party users...
