Lucene search
+L

6430 matches found

osv_debian
osv_debian
•added 2018/06/08 9:29 p.m.•11 views

DEBIAN-CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS7.3AI score0.08247EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/06/08 9:00 p.m.•42 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

8AI score0.08247EPSS
SaveExploits0References21
AlpineLinux
AlpineLinux
•added 2018/06/08 9:00 p.m.•62 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS8.1AI score0.08247EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2018/06/08 12:00 a.m.•20 views

UBUNTU-CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS6.8AI score0.08247EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•18 views

PT-2018-2214

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.2.8 Description The issue is related to the mishandling of the original filename during decryption and verification actions in the mainproc.c component. This allows remote attackers to spoof output sent to other...

7.8CVSS7.5AI score0.08247EPSS
SaveExploits0References111
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/08 12:00 a.m.•6 views

CVE-2018-12020: Use of Incorrectly-Resolved Name or Reference

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS7.5AI score0.08247EPSS
SaveExploits0References2
zdt
zdt
•added 2018/05/31 12:00 a.m.•40 views

Linux/x86 - Bind (4444/TCP) Shell Shellcode (105 bytes)

/ ; Filename: tcpbindshellcodelight.nasm ; Author: Paolo Perego ; Website: https://codiceinsicuro.it ; Twitter: @thesp0nge ; SLAE-ID: 1217 ; Purpose: binds on TCP port 4444 and spawn a shell on incoming connections. global start section .text start: ; Creating the socket. ; ; int socketint domain...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2018/05/18 12:00 a.m.•21 views

VCFtools header::add_FORMAT_descriptor function denial of service vulnerability

VCFtools is a package for working with VCF files. A denial of service vulnerability exists in the header::addFORMATdescriptor function in header.cpp in VCFtools 0.1.15. A remote attacker can exploit this vulnerability via a specially crafted vcf file to cause a denial of service reuse after relea...

7.8CVSS7.6AI score0.20136EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/05/18 12:00 a.m.•26 views

VCFtools header::add_INFO_descriptor function denial of service vulnerability

VCFtools is a package for working with VCF files. A denial of service vulnerability exists in the header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15. A remote attacker can exploit this vulnerability via a specially crafted vcf file to cause a denial of service reuse after release...

7.8CVSS7.6AI score0.01407EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2018/05/17 7:29 p.m.•8 views

DEBIAN-CVE-2018-11129

The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted vcf file...

7.8CVSS7.8AI score0.01407EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2018/05/17 12:00 a.m.•11 views

UBUNTU-CVE-2018-11099

The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...

5.5CVSS6.9AI score0.01471EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2018/05/17 12:00 a.m.•15 views

UBUNTU-CVE-2018-11130

The header::addFORMATdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted vcf file...

7.8CVSS7.2AI score0.20136EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2018/05/17 12:00 a.m.•12 views

UBUNTU-CVE-2018-11129

The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted vcf file...

7.8CVSS7.2AI score0.01407EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2018/05/17 12:00 a.m.•48 views

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4110)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4110 advisory. - media: imon: Fix null-ptr-deref in imonprobe Arvind Yadav Orabug: 27208383 CVE-2017-16537 - Input: gtco - fix potential out-of-bound access Dmitr...

7.8CVSS7AI score0.93838EPSS
SaveExploits29References10
Positive Technologies
Positive Technologies
•added 2018/05/16 12:00 a.m.•5 views

PT-2018-3438

Name of the Vulnerable Software and Affected Versions: VCFtools version 0.1.15 Description: The issue is related to a heap-based buffer over-read in the header::add INFO descriptor function, which can lead to information disclosure. This can be exploited by remote attackers using a crafted vcf...

7.8CVSS0.01471EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
•added 2018/05/16 12:00 a.m.•3 views

PT-2018-3439

Name of the Vulnerable Software and Affected Versions: VCFtools version 0.1.15 Description: The issue is related to the header::add INFO descriptor function in VCFtools, which is associated with a use-after-free error. This can be exploited by a remote attacker using a specially crafted vcf file,...

9.3CVSS0.01407EPSS
SaveExploits0References29
CNVD
CNVD
•added 2018/05/03 12:00 a.m.•12 views

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability (CNVD-2018-09227)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

5.5CVSS6.8AI score0.02133EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/05/03 12:00 a.m.•9 views

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability (CNVD-2018-09562)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

5.5CVSS6.8AI score0.01784EPSS
SaveExploits0References1
Prion
Prion
•added 2018/04/29 3:29 p.m.•31 views

Design/Logic Flaw

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

4.3CVSS6.5AI score0.01784EPSS
SaveExploits0References6Affected Software4
osv_debian
osv_debian
•added 2018/04/29 3:29 p.m.•15 views

DEBIAN-CVE-2018-10534

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

5.5CVSS7.7AI score0.01784EPSS
SaveExploits0References1
Rows per page
Query Builder