Heap overflow

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-11757

CVE-2017-11757 describes a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13. The issue occurs in the _srvLnaConnectMP1 function and is triggered by crafted traffic to TCP port 1583 after the Server-Client encryption-key exchange. The underlying cause is an integer underflow ...

PT-2017-12225

Name of the Vulnerable Software and Affected Versions Actian Pervasive PSQL version 12.10 Actian Zen version 13 Description The issue is a heap-based buffer overflow that allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. This occurs after the Server-Client...

CVE-2017-11757: Integer Underflow (Wrap or Wraparound)

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte...

CVE-2017-7367

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

CVE-2016-10340

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

Integer overflow

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

Integer overflow

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

CVE-2016-10340

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

CVE-2017-7367

CVE-2017-7367 concerns an integer underflow in the boot image processing path on Android CAF builds using the Linux kernel. The available connected documents identify this as a DoS-type issue (bootloader component) with a high-severity impact profile. The exact affected products, versions, and fi...

CVE-2016-10340

CVE-2016-10340 affects CAF Android releases that use the Linux kernel, with an issue described as an integer underflow in a syscall handler that leads to a buffer overflow. The documents provided confirm the vulnerability description but do not give specific product/vendor versions, affected kern...

CVE-2017-7367

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

PT-2017-2251

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the system call handler of the Android operating system, leading to a buffer overflow. This could allow a remote attacker to cause a denial ...

CVE-2017-7367: Integer Underflow (Wrap or Wraparound)

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

PT-2017-2321

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the boot image processing service of the Android operating system. This can be exploited by a remote attacker to cause the device to crash a...

CVE-2016-10340: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

Debian DLA-962-1 : tnef security update

CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.9-1+deb7u3. We recommend that you upgrade your tnef...

[SECURITY] [DLA 962-1] tnef security update

Package : tnef Version : 1.4.9-1+deb7u3 CVE ID : CVE-2017-8911 CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 "Wheezy", these problems have been fixed in...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in "lib/flow.c" in the function "miniflowextract", permitting remote bypass of the access control list enforced by the switch...

CVE-2016-10377: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...