PT-2017-14286

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.4 Description The issue is related to an out-of-bounds read in the EXTRACTOR dvi extract method function, located in the plugins/dvi extractor.c file. Recommendations For GNU Libextractor version 1.4, consider...

PT-2017-13953

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.4 Description The issue is related to a Divide-By-Zero error in the EXTRACTOR wav extract method function, located in the wav extractor.c file. This error occurs when a zero sample rate is encountered. Recommendation...

Apple macOS High Sierra Security Security Bypass Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Security component is one of the security components. A security bypass vulnerability exists in the Security component of Apple macOS High Sierra versions prior to 10.13. An attacker can exploit th...

Downloading and analyzing NVD CVE feed

In previous post "New National Vulnerability Database visualizations and feeds" I mentioned JSON NVD feed. Let's see what data it contains, how to download and analyse it. First of all, we need to download all files with CVEs from NVD database and save them to some directory. Unfortunately, there...

Multiple Thales nShield Connect Hardware Privilege Access Control Vulnerabilities

Thales nShield Connect hardware models 500 and others are networked HSM Hardware Security Module devices from Thales e-Security, USA. A security vulnerability exists in several models of Thales nShield Connect hardware. An attacker in close physical proximity could exploit this vulnerability to...

BSA-2017-380

Security Advisory ID : BSA-2017-380 Component : OpenVPN Revision : 1.0: Interim OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension. Affected Products Brocade is...

PT-2017-6535

Name of the Vulnerable Software and Affected Versions Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ versions prior to 11.72 Description The issue allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device...

eapmd5pass 'extract_eapusername' function denial of service vulnerability

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. A security vulnerability exists in the 'extracteapusername' function in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network traffic to cause the eapmd5pa...

PT-2017-12163

Name of the Vulnerable Software and Affected Versions eapmd5pass version 1.4 Description A length validation flaw was found in the way eapmd5pass handled network traffic in the extract eapusername function, potentially leading to out-of-bounds read and write. This could allow a remote attacker to...

PT-2017-4076

Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 7.4 Description The issue is related to the krb5 extract ticket function, which obtains service-principal names in a way that violates the Kerberos 5 protocol specification. This allows remote attackers to impersonate...

ALPINE-CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

DEBIAN-CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

PT-2017-11745

Name of the Vulnerable Software and Affected Versions tcpdump version 4.9.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via crafted packet data. This occurs in the EXTRACT 16BITS function, which is...

CVE-2017-11100

When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...

DEBIAN-CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

UBUNTU-CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

PT-2017-17785

Name of the Vulnerable Software and Affected Versions OpenVPN versions prior to 2.4.3 OpenVPN versions prior to 2.3.17 Description The issue is related to remote denial-of-service due to memory exhaustion. This is caused by memory leaks and a double-free issue in the extract x509 extension...

Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries

Overview Installer of CASL II simulatorself-extract format provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT Communications Corporation reported this...

DEBIAN-CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

UBUNTU-CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...