CVE-2015-8076

CVE-2015-8076 affects Cyrus IMAPd (Cyrus IMAP) where the index_urlfetch function in index.c is vulnerable to an out-of-bounds heap read via the urlfetch range. Affected are Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, and 2.5.x before 2.5.4. Public references (OpenSUSE, Red Hat, OpenVAS n...

CVE-2015-8076: Improper Restriction of Operations within the Bounds of a Memory Buffer

The indexurlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read...

CVE-2015-8317

The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an 1 unterminated encoding value or 2 incomplete XML declaration in XML data, which triggers an out-of-bounds heap read...

PT-2015-3259

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.3 Description The issue allows context-dependent attackers to obtain sensitive information via an unterminated encoding value or incomplete XML declaration in XML data, triggering an out-of-bounds heap read. This...

PT-2015-3147

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions 2.3.x through 2.3.18 Cyrus IMAP versions 2.4.x through 2.4.17 Cyrus IMAP versions 2.5.x through 2.5.3 Description The issue is caused by an out-of-bounds heap read in the index urlfetch function. This can allow a remote...

CVE-2015-3622

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

Design/Logic Flaw

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

CVE-2015-3622

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

CVE-2015-3622

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

CVE-2015-3622

CVE-2015-3622 affects the libtasn1 library (ASN.1 parsing/DER encoding). The vulnerability is in _asn1_extract_der_octet() in libtasn1’s decoding.c, which can read beyond the allocated buffer when processing certain DER-encoded input, leading to a remote denial of service via a crafted certificat...

CVE-2015-3622

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

CVE-2015-3622: Improper Restriction of Operations within the Bounds of a Memory Buffer

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

PT-2015-6243

Name of the Vulnerable Software and Affected Versions GNU Libtasn1 versions prior to 4.5 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted certificate. This is related to the asn1 extract der octet function ...

CVE-2015-3622

The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted certificate...

CVE-2015-2325

The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service out-of-bounds heap read and crash, or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large...

PT-2015-5715

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.37 Description The issue allows context-dependent attackers to compile incorrect code, cause a denial of service out-of-bounds heap read and crash, or possibly have other unspecified impact via a regular expression wit...

grep: denial of service

The bmexectrans function in kwset.c allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option. grep's read buffer is often filled to its full size, except when reading the final buffer of a file. In that case, the number of bytes...

PT-2016-3812

Name of the Vulnerable Software and Affected Versions librsvg versions prior to 2.40.7 Description The issue allows context-dependent attackers to cause a denial of service, specifically an out-of-bounds heap read, by exploiting the rsvg node poly build path function in rsvg-shapes.c. This can be...

CVE-2015-1345

The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...

Out-of-bounds

The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...