CVE-2016-2070

CVE-2016-2070 affects Linux kernels prior to 4.3.5. The tcp_cwnd_reduction function in net/ipv4/tcp_input.c can be triggered by crafted TCP traffic to cause a divide-by-zero DoS and system crash. According to connected advisories, upgrading to kernel 4.3.5 (as cited in ChangeLog-4.3.5) is the rem...

CVE-2015-5479

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

CVE-2015-5479

Libav’s ff_h263_decode_mba in libavcodec/ituh263dec.c is vulnerable before 11.5, allowing remote attackers to cause a denial of service (divide-by-zero and crash) via crafted dimensions. The issue stems from insufficient validation during H.263 MBA decoding. Impact is a crash; confidentiality/int...

Silicon Graphics LibTiff rgb2ycbcr tool divide by zero error vulnerability (CNVD-2016-02320)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. A divide-by-zero error vulnerability in Silicon Graphics LibTiff's rgb2ycbcr tool allows remote attackers to construct a malicious image that can be tricked into parsing by the user, which can crash the application...

MGASA-2016-0140 Updated imlib2 packages fix security vulnerabilities

Updated imlib2 packages fix security vulnerabilities: An out-of-bounds read caused by an off-by-one error in imlibMergeUpdate in src/lib/updates.c in imlib2 1.4.8 and earlier CVE-2016-3993. An out-of-bounds read from colormap in the GIF loader in imlib2 1.4.8 and earlier can result in denial of...

Updated imlib2 packages fix security vulnerabilities

Updated imlib2 packages fix security vulnerabilities: An out-of-bounds read caused by an off-by-one error in imlibMergeUpdate in src/lib/updates.c in imlib2 1.4.8 and earlier CVE-2016-3993. An out-of-bounds read from colormap in the GIF loader in imlib2 1.4.8 and earlier can result in denial of...

imlib2 divide by zero error vulnerability

imlib2 is a general-purpose graphics loading and rendering library. A divide-by-zero error vulnerability exists in imlib2, which can be exploited by an attacker to cause a denial of service...

Silicon Graphics LibTiff rgb2ycbcr Tool Divide by Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the rgb2ycbcr tool in Silicon...

Silicon Graphics LibTiff tiff2rgba Tool Removes Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the 'fpAcc' function in the...

DEBIAN-CVE-2015-7513

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...

CVE-2015-7513

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...

SUSE-SU-2016:0282-1 Security update for gdk2

This update for gdk2 fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issues were fixed: - bsc960155: fix a possible divide by zero...

SUSE-SU-2016:0225-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issue was fixed: - bsc960155: fix a possible divide by zero...

AIX 7.1 TL 3 : ntp (IV79943) (deprecated)

The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...

wireshark-gtk: denial of service

CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...

Wireshark S7COMM Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...

CVE-2015-8737

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

UBUNTU-CVE-2015-8738

The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

CVE-2015-8737

CVE-2015-8737 affects Wireshark’s MP2T file parser (wiretap/mp2t.c) in Wireshark 2.0.x before 2.0.1. The mp2t_open function does not validate the bit rate, enabling a crafted file to trigger a divide-by-zero and crash (DoS). Mitigation: upgrade to Wireshark 2.0.1 or later where the issue is fixed.

SUSE-SU-2015:2000-1 Security update for libsndfile

The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519...