PT-2017-2251

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the system call handler of the Android operating system, leading to a buffer overflow. This could allow a remote attacker to cause a denial ...

PT-2017-2321

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the boot image processing service of the Android operating system. This can be exploited by a remote attacker to cause the device to crash a...

CVE-2017-7367: Integer Underflow (Wrap or Wraparound)

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

Debian DLA-962-1 : tnef security update

CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.9-1+deb7u3. We recommend that you upgrade your tnef...

[SECURITY] [DLA 962-1] tnef security update

Package : tnef Version : 1.4.9-1+deb7u3 CVE ID : CVE-2017-8911 CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 "Wheezy", these problems have been fixed in...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in "lib/flow.c" in the function "miniflowextract", permitting remote bypass of the access control list enforced by the switch...

CVE-2016-10377: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

PT-2017-7891

Name of the Vulnerable Software and Affected Versions Open vSwitch version 2.5.0 Description A malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in the function miniflow extract in lib/flow.c, permitting remote bypass of the...

CVE-2017-2819

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

CVE-2017-2819

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

CVE-2017-2819: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

PT-2017-15557

Name of the Vulnerable Software and Affected Versions Hancom Thinkfree Office NEO version 9.6.1.4902 Description A heap-based buffer overflow issue exists in the Hangul Word Processor component. This can be triggered by a specially crafted document stream, causing an integer underflow that result...

Integer overflow

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

CVE-2017-9214

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

CVE-2017-9214

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function "ofputilpullqueuegetconfigreply10" in "lib/ofp-util.c"...

CVE-2017-9214

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

CVE-2017-9214: Integer Underflow (Wrap or Wraparound)

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

CVE-2017-9214

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...

PT-2017-18792

Name of the Vulnerable Software and Affected Versions Open vSwitch OvS version 2.7.0 Description The issue is caused by a buffer over-read due to an unsigned integer underflow in the ofputil pull queue get config reply10 function in lib/ofp-util.c, which occurs while parsing an OFPT QUEUE GET...

CVE-2017-8924

The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel allows local users to obtain sensitive information in the dmesg ringbuffer and syslog from uninitialized kernel memory by using a crafted USB device posing as an ioti USB serial device to trigger an integer underflow...