CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363

CVE-2017-8363 affects libsndfile 1.0.28, where the flac_buffer_copy function (flac.c) is vulnerable to a heap-based out-of-bounds read via a crafted audio file, causing denial of service. Documented in multiple advisories; impact is a crash/DoS. Affected packages include libsndfile and various OS...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-8363: Out-of-bounds Read

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2016-10349

The archivele32dec function in archiveendian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2016-10350

The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

openSUSE Security Update : curl (openSUSE-2017-513)

This update for curl fixes the following issues : Security issue fixed : - CVE-2016-9586: libcurl printf floating point buffer overflow bsc1015332 - CVE-2017-7407: The ourWriteOut function in toolwriteout.c in curl might have allowed physically proximate attackers to obtain sensitive information...

CVE-2017-7982

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

[SECURITY] [DLA 909-1] libcroco security update

Package : libcroco Version : 0.6.6-2+deb7u1 CVE ID : CVE-2017-7960 CVE-2017-7961 Debian Bug : 860961 CVE-2017-7960 A heap-based buffer over-read vulnerability could be triggered remotely via a crafted CSS file to cause a denial of service. CVE-2017-7961 An "outside the range of representable valu...

Integer overflow

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

CVE-2017-7982

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

CVE-2017-7982

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

CVE-2017-7982

CVE-2017-7982 affects libimobiledevice/libplist (plist_from_bin in bplist.c). An integer overflow in plist_from_bin allows a crafted plist file to trigger a heap-based buffer over-read and application crash, enabling a denial of service. Affected: libplist prior to 2017-04-19. CVSS metrics indica...

CVE-2017-7982

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

Heap overflow

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...