CVE-2017-12453

The bfdvmsslurpeeom function in libbfd.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

Design/Logic Flaw

The bfdvmssavesizedstring function in vms-misc.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file...

UBUNTU-CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

UBUNTU-CVE-2017-12457

The bfdmakesectionwithflags function in section.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file...

DEBIAN-CVE-2017-12459

The bfdmachoreadsymtabstrtab function in bfd/mach-o.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file...

DEBIAN-CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

UBUNTU-CVE-2017-12458

The nlmswapauxiliaryheadersin function in bfd/nlmcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file...

UBUNTU-CVE-2017-12459

The bfdmachoreadsymtabstrtab function in bfd/mach-o.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file...

Design/Logic Flaw

The bfdvmsslurpeeom function in libbfd.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

CVE-2017-12455

The evaxbfdprintemh function in vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

CVE-2017-12458

CVE-2017-12458 affects GNU Binutils libbfd (nlm_swap_auxiliary_headers_in in bfd/nlmcode.h). As distributed in Binutils 2.29 and earlier, it allows a remote attacker to cause an out-of-bounds heap read via a crafted nlm file. The vulnerability is tied to the nlm_swap_auxiliary_headers_in routine ...

Qemu: net: infinite loop in e1000e NIC emulation

QEMU aka Quick Emulator, when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service infinite loop via vectors related to setting the initial receive / transmit descriptor head TDH/RDH outside the allocated descriptor buffer...

Qemu: net: infinite loop in e1000e NIC emulation

QEMU aka Quick Emulator, when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service infinite loop via vectors related to setting the initial receive / transmit descriptor head TDH/RDH outside the allocated descriptor buffer...

Qemu: net: rtl8139: infinite loop while transmit in C+ mode

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

Qemu: virtio: null pointer dereference in virtqueu_map_desc

The virtqueuemapdesc function in hw/virtio/virtio.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via a large I/O descriptor buffer length value...

golang: net/http: multipart ReadForm close file after copy

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c

A null-pointer dereference vulnerability was found in libtirpc. The return value of makefdxprt was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash ...

PT-2017-4271

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the bfd vms save sized string function in the vms-misc.c component of the Binary File Descriptor BFD library, which allows remote attackers to cause an out of bounds...

openSUSE Security Update : qemu (openSUSE-2017-822)

This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service infinite loop by leveraging an incorrect return value bsc1042159. - CVE-2017-8379: Memory leak in the keyboard input...