4581 matches found
SUSE-SU-2016:0225-1 Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issue was fixed: - bsc960155: fix a possible divide by zero...
AIX 7.1 TL 3 : ntp (IV79943) (deprecated)
The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...
wireshark-gtk: denial of service
CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...
Wireshark S7COMM Parser Denial of Service Vulnerability
Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...
CVE-2015-8737
The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...
UBUNTU-CVE-2015-8738
The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...
CVE-2015-8737
CVE-2015-8737 affects Wireshark’s MP2T file parser (wiretap/mp2t.c) in Wireshark 2.0.x before 2.0.1. The mp2t_open function does not validate the bit rate, enabling a crafted file to trigger a divide-by-zero and crash (DoS). Mitigation: upgrade to Wireshark 2.0.1 or later where the issue is fixed.
CVE-2015-8738
The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...
CVE-2015-8737
The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...
CVE-2015-8737: Improper Input Validation
The mp2topen function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...
CVE-2015-8738: Improper Input Validation
The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...
PT-2016-3985
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.1 Description The issue is related to the mp2t open function in the MP2T file parser, which does not validate the bit rate. This allows remote attackers to cause a denial of service, resulting in a...
PT-2016-3986
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the s7comm decode ud cpu szl subfunc function in the S7COMM dissector, which does not validate the list count in an SZL response. This allows remote attackers to cause ...
PT-2015-7559
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4 Description The issue allows guest OS users to cause a denial of service, resulting in a divide-by-zero error and host OS crash, by setting a zero value. This is related to the kvm vm ioctl set pit and kvm vm...
SUSE-SU-2015:2000-1 Security update for libsndfile
The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519...
MGASA-2015-0474 Updated potrace packages fix security vulnerabilities
Potrace before 1.13 has some critical bugs in the processing of BMP files. These bugs allowed the program to be crashed, or potentially to be abused in other ways, by feeding it specially crafted BMP files, due to heap overflow, null pointer dereference, and divide by zero issues...
PT-2015-7945
Name of the Vulnerable Software and Affected Versions Potrace versions prior to 1.13 Description The issue is related to critical bugs in the processing of BMP files, which can cause the program to crash or potentially be exploited in other ways by feeding it specially crafted BMP files. The bugs...
DEBIAN-CVE-2014-9756
The psffwrite function in fileio.c in libsndfile allows attackers to cause a denial of service divide-by-zero error and application crash via unspecified vectors related to the headindex variable...
Design/Logic Flaw
The psffwrite function in fileio.c in libsndfile allows attackers to cause a denial of service divide-by-zero error and application crash via unspecified vectors related to the headindex variable...