CVE-2017-5549

The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log...

CVE-2017-5549

The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log...

CVE-2017-5550

Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision...

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass a long digit string in hex format to trigger an integer overflow, which can cause heap memory corruption or null pointer dereferences that can cause the system to crash...

Debian DLA-803-1 : lcms2 security update

An out of bounds read was found in lcms2, which can lead to heap memory leak or denial of service via a specially crafted ICC profile. For Debian 7 'Wheezy', these problems have been fixed in version 2.2+git20110628-2.2+deb7u2. We recommend that you upgrade your lcms2 packages. NOTE: Tenable...

[SECURITY] [DLA 803-1] lcms2 security update

Package : lcms2 Version : 2.2+git20110628-2.2+deb7u2 CVE ID : CVE-2016-10165 Debian Bug : https://bugs.debian.org/852627 An out of bounds read was found in lcms2, which can lead to heap memory leak or denial of service via a specially-crafted ICC profile. For Debian 7 "Wheezy", these problems hav...

CVE-2017-5550

Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision...

DEBIAN-CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

UBUNTU-CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

Design/Logic Flaw

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

CVE-2016-9584 affects libical, where parsing ICS files can trigger a use-after-free in the library, potentially leading to denial of service and heap memory exposure. Connected advisories and Nessus plugins consistently describe libical as the vulnerable component and reference the same use-after...

CVE-2017-2591

It was found that the uniquenessentrytoconfig function, used by the "attribute uniqueness" plugin of 389 Directory Server, did not properly NULL terminate an array used in some configuration. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

Foxit Reader Out of Bounds Read Local Information Disclosure Vulnerability - Windows

Foxit Reader is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:0127-1)

qemu was updated to fix several issues. These security issues were fixed : - CVE-2016-9102: Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in allowed local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreat...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170110)

Security Fixes : - A use-after-free vulnerability was found in the kernels socket recvmmsg subsystem. This may allow remote attackers to corrupt memory and may allow execution of arbitrary code. This corruption takes place during the error handling routines within sysrecvmmsg function...