CVE-2015-7513: Divide By Zero

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...

PT-2016-3512

Name of the Vulnerable Software and Affected Versions imlib2 versions prior to 1.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted PNM file. Recommendations For versions prior to 1.4.7, update t...

SUSE-SU-2016:0282-1 Security update for gdk2

This update for gdk2 fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issues were fixed: - bsc960155: fix a possible divide by zero...

SUSE-SU-2016:0225-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issue was fixed: - bsc960155: fix a possible divide by zero...

AIX 7.1 TL 3 : ntp (IV79943) (deprecated)

The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...

wireshark-gtk: denial of service

CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...

Wireshark S7COMM Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...

CVE-2015-8737

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

UBUNTU-CVE-2015-8738

The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

CVE-2015-8737

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

CVE-2015-8738

The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

CVE-2015-8737

CVE-2015-8737 affects Wireshark’s MP2T file parser (wiretap/mp2t.c) in Wireshark 2.0.x before 2.0.1. The mp2t_open function does not validate the bit rate, enabling a crafted file to trigger a divide-by-zero and crash (DoS). Mitigation: upgrade to Wireshark 2.0.1 or later where the issue is fixed.

CVE-2015-8738: Improper Input Validation

The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

PT-2016-3985

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.1 Description The issue is related to the mp2t open function in the MP2T file parser, which does not validate the bit rate. This allows remote attackers to cause a denial of service, resulting in a...

PT-2016-3986

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the s7comm decode ud cpu szl subfunc function in the S7COMM dissector, which does not validate the list count in an SZL response. This allows remote attackers to cause ...

CVE-2015-8737: Improper Input Validation

The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

PT-2015-7559

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4 Description The issue allows guest OS users to cause a denial of service, resulting in a divide-by-zero error and host OS crash, by setting a zero value. This is related to the kvm vm ioctl set pit and kvm vm...

SUSE-SU-2015:2000-1 Security update for libsndfile

The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519...

MGASA-2015-0474 Updated potrace packages fix security vulnerabilities

Potrace before 1.13 has some critical bugs in the processing of BMP files. These bugs allowed the program to be crashed, or potentially to be abused in other ways, by feeding it specially crafted BMP files, due to heap overflow, null pointer dereference, and divide by zero issues...

PT-2015-7945

Name of the Vulnerable Software and Affected Versions Potrace versions prior to 1.13 Description The issue is related to critical bugs in the processing of BMP files, which can cause the program to crash or potentially be exploited in other ways by feeding it specially crafted BMP files. The bugs...