4509 matches found
PT-2018-3949 · Hdf +2 · Hdf5 +2
Name of the Vulnerable Software and Affected Versions: HDF5 versions 1.10.3 and earlier Description: The issue is related to a memory leak in the H5O dtype decode helper function in the H5Odtype.c component of the HDF5 library. This allows attackers to cause a denial of service due to memory...
DEBIAN-CVE-2018-17206
An issue was discovered in Open vSwitch OvS 2.7.x through 2.7.6. The decodebundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding...
PT-2018-3614 · Exiv2 +7 · Exiv2 +7
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to the Exiv2::IptcParser::decode function in the iptc.cpp file, which may cause a denial of service due to a heap-based buffer over-read. This is caused by an integer overflow when processi...
CVE-2018-7792
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to decode the password using rainbow table...
Malicious input could cause uninitialized memory to be exposed
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...
RUSTSEC-2018-0004 Malicious input could cause uninitialized memory to be exposed
Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...
PT-2018-15485
Name of the Vulnerable Software and Affected Versions Claxon versions prior to 0.4.1 Description An issue in Claxon allows uninitialized memory to be exposed due to mishandled decode buffer sizes. The affected versions made an invalid assumption about the decode buffer size being a multiple of a...
PT-2018-2704
Name of the Vulnerable Software and Affected Versions Open vSwitch OvS versions 2.7.x through 2.7.6 Description A buffer over-read issue exists in the decode bundle function inside lib/ofp-actions.c during BUNDLE action decoding. This issue can be exploited by a remote attacker to cause a denial ...
HDF5 Buffer Overflow Vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A buffer overflow vulnerability exists in the 'H5Osdspacedecode' function of the H5Osdspace.c file in HDF5 version 1.8.20. An...
Heap overflow
The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...
CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...
PT-2018-12699
Name of the Vulnerable Software and Affected Versions cloudwu PBC versions prior to 2017-03-02 Description An issue in libpbc.a can cause a SEGV in the wiretype decode function in context.c. Recommendations For versions prior to 2017-03-02, at the moment, there is no information about a newer...
UBUNTU-CVE-2018-14460
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...
DEBIAN-CVE-2018-14460
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...
DEBIAN-CVE-2018-14435
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...
FreeBSD : mutt/neomutt -- multiple vulnerabilities (fe12ef83-8b47-11e8-96cc-001a4a7ec6be)
NeoMutt report : DescriptionCVE-2018-14349 NO Response Heap Overflow CVE-2018-14350 INTERNALDATE Stack Overflow CVE-2018-14351 STATUS Literal Length relative write CVE-2018-14352 imapquotestring off-by-one stack overflow CVE-2018-14353 imapquotestring int underflow CVE-2018-14354 imapsubscribe...
PT-2018-12538
Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the H5O sdspace decode function, located in the H5Osdspace.c file of the HDF5 library. Recommendations For version 1.8.20, consider updating to a newer versi...
UBUNTU-CVE-2018-14435
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...
Libsixel Memory Disclosure Vulnerability
libsixel is a SIXEL encoder/decoder implementation. The 'sixeldecoderdecode' function in the decoder.c file, the 'imagebufferresize' function in the fromsixel.c file, and the 'sixeldecoderaw' function in the fromsixel.c file in libsixel version 1.8.1. ' function, 'imagebufferresize' function of t...