Lucene search
+L

78 matches found

Prion
Prion
added 2019/06/19 12:15 p.m.29 views

Null pointer dereference

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

4CVSS6.2AI score0.02845EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
added 2019/06/19 12:00 p.m.75 views

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

6.5CVSS6.5AI score0.02845EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/06/19 12:00 p.m.96 views

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

6.5CVSS6.4AI score0.02845EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/06/19 12:00 a.m.46 views

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

6.5CVSS6.9AI score0.02845EPSS
SaveExploits0References3
OSV
OSV
added 2019/06/19 12:00 a.m.8 views

UBUNTU-CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

6.5CVSS7AI score0.02845EPSS
SaveExploits0References4
OSV
OSV
added 2018/09/02 3:29 a.m.6 views

DEBIAN-CVE-2018-16335

newoffsets handling in ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a...

8.8CVSS8.1AI score0.02647EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/06/26 12:00 a.m.10 views

Silicon Graphics LibTIFF 'libtiff/tif_dirread.c' Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF version 4.0.7, which stems from...

6.5CVSS6.8AI score0.01578EPSS
SaveExploits0References1
OSV
OSV
added 2017/06/02 12:00 a.m.17 views

UBUNTU-CVE-2017-9403

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tifdirread.c, which allows attackers to cause a denial of service via a crafted file...

6.5CVSS6.6AI score0.01248EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/04/11 12:00 a.m.14 views

Silicon Graphics LibTIFF tif_dirread.c File Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the tifdirread.c file in Silicon Graphics LibTIFF version...

7.8CVSS6.8AI score0.02495EPSS
SaveExploits1References1
CNVD
CNVD
added 2016/11/23 12:00 a.m.40 views

LibTIFF 'tif_dirread.c' Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A denial of service vulnerability exists in LibTIFF 'tifdirread.c', which can be exploited b...

7.5CVSS6.8AI score0.04975EPSS
SaveExploits0References1
Prion
Prion
added 2016/07/06 2:59 p.m.22 views

Design/Logic Flaw

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

6.5CVSS6.6AI score0.0158EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2016/05/19 12:00 a.m.20 views

Apache Ambari Information Disclosure Vulnerability (CNVD-2016-03363)

Apache Ambari is a set of tools for configuring, managing, and monitoring Apache Hadoop clusters from the Apache USA Software Foundation. An information disclosure vulnerability exists in Apache Ambari versions prior to 2.1.2. It allows local users to obtain sensitive information by reading files...

3.3CVSS5.8AI score0.00404EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2011/11/22 4:36 p.m.9 views

kernel: cifs: signedness issue in CIFSFindNext()

Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service memory corruption or possibly have unspecified other impact via a large length value in a response to a read request for a directory...

8.8CVSS7.4AI score0.01077EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2011/10/20 12:00 a.m.11 views

PT-2012-1679 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue is related to an integer signedness error in the CIFSFindNext function, which can be exploited by remote CIFS servers. This error occurs when a large length value is included in a...

9.1CVSS7AI score0.05798EPSS
SaveExploits18References52
RedHat Linux
RedHat Linux
added 2010/04/13 9:21 p.m.10 views

nss_db: Information leak due the DB_CONFIG file read from current working directory

The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module...

1.9CVSS5.8AI score0.00376EPSS
SaveExploits1References4
exploitpack
exploitpack
added 2009/09/04 12:00 a.m.18 views

Microsoft IIS 5.06.0 FTP Server - Stack Exhaustion Denial of Service

Microsoft IIS 5.06.0 FTP Server - Stack Exhaustion Denial of Service MS IIS FTPD DoS ZER0DAY There is a DoS vulnerability in the globbing functionality of IIS FTPD. Anonymous users can exploit this if they have read access to a directory!!! Normal users can exploit this too if they can read a...

0.4AI score
SaveExploits0
OSV
OSV
added 2006/04/25 11:02 p.m.6 views

DEBIAN-CVE-2006-2024

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...

4CVSS6.4AI score0.0865EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
added 2005/04/12 2:07 p.m.8 views

security flaw

Vulnerability in tifdirread.c for libtiff allows remote attackers to cause a denial of service application crash via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452...

4.3CVSS5.9AI score0.04329EPSS
SaveExploits0References4
Rows per page
Query Builder