15169 matches found
Arbitrary Code Execution
glibc is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1...
Privilege Escalation
libXfont.so is vulnerable to privilege escalation. An integer overflow bug in FontFileAddEntry and lexAlias allows a local attacker to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which results in a heap-based buffer overflow...
Denial Of Service (DoS)
libvncserver is vulnerable to denial of service DoS attacks. The vulnerability exists as an integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via an...
Denial Of Service (DoS)
php is vulnerable to denial of service DoS attacks. The vulnerability exists as the scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer...
Denial Of Service (DoS)
perl is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...
Denial Of Service (DoS)
gegl is vulnerable to denial of service DoS attacks. The vulnerability exists as multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large...
Denial Of Service (DoS)
Linux kernel-rt is vulnerable to denial of service. A heap-based buffer overflow in the hoststart function in drivers/usb/chipidea/host.c due to improper support for a non-streaming option, allowing local users to crash the system by sending a large amount of network traffic through a USB/Etherne...
Denial Of Service (DoS)
php is vulnerable to denial of service DoS attacks. The vulnerability exists through an Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...
Denial Of Service (DoS)
Ghostscript is vulnerable to denial of service. An integer overflow, which results in a heap-based buffer overflow in the icmLutallocate function in icclib allows an attacker to crash the application or possibly execute arbitrary code via a malicious PostScript or PDF file with embedded images...
Denial Of Service (DoS)
libtiff is vulnerable to denial of service. An integer overflow in the TIFFReadDirectory function in tifdirread.c allows a remote attacker to crash the application, or potentially execute arbitrary code, by passing a negative tile depth in a tiff image to cause a heap-based buffer overflow...
Denial Of Service (DoS)
gtk2 is vulnerable to denial of service DoS attacks. The vulnerability exists through multiple integer overflow issues in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 widt...
Remote Code Execution (RCE)
samba4 is vulnerable to remote code execution RCE attacks. The vulnerability exists through a heap-based buffer overflow in the dcerpcreadncacnpacketdone function in librpc/rpc/dcerpcutil.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain...
Remote Code Execution (RCE)
libpng is vulnerable to remote code execution RCE attacks. The vulnerability exists as the pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service or execute arbitrary co...
CVE-2018-20712
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...
CVE-2018-20712
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...
CVE-2018-20712
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...
CVE-2018-20712
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...
