Lucene search
+L

222 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/03 12:00 a.m.•8 views

CVE-2018-10717: Out-of-bounds Write

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted...

8.8CVSS8AI score0.0195EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/05/03 12:00 a.m.•10 views

PT-2018-10063

Name of the Vulnerable Software and Affected Versions MiniUPnP ngiflib version 0.4 Description The issue is related to the DecodeGifImg function in ngiflib.c, which does not consider the bounds of the pixels data structure. This allows remote attackers to cause a denial of service, resulting in a...

8.8CVSS6.1AI score0.0195EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2018/05/02 7:29 p.m.•26 views

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

8.8CVSS9.4AI score0.01457EPSS
SaveExploits1References2
NVD
NVD
•added 2018/05/02 7:29 p.m.•35 views

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

8.8CVSS9.2AI score0.01457EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/05/02 7:00 p.m.•36 views

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

9.2AI score0.01457EPSS
SaveExploits1References2
Mend
Mend
•added 2018/05/02 7:00 p.m.•6 views

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

8.8CVSS0.01457EPSS
SaveExploits1References2
CVE
CVE
•added 2018/05/02 7:00 p.m.•68 views

CVE-2018-10677

Summary: The vulnerability affects MiniUPnP ngiflib 0.4, specifically the DecodeGifImg function in ngiflib.c, which does not correctly validate width/height bounds. This lack of validation can enable a remote attacker to trigger a denial of service via a heap-based WritePixels buffer overflow and...

8.8CVSS9AI score0.01457EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2018/05/02 12:00 a.m.•10 views

PT-2018-10047

Name of the Vulnerable Software and Affected Versions MiniUPnP ngiflib version 0.4 Description The issue is related to the DecodeGifImg function in ngiflib.c, which lacks checks against width and height. This allows remote attackers to cause a denial of service, resulting in a WritePixels...

8.8CVSS6.1AI score0.01457EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/02 12:00 a.m.•9 views

CVE-2018-10677: Out-of-bounds Write

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

8.8CVSS8.1AI score0.01457EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/02/23 12:00 a.m.•61 views

MiniUPnP <= 2.0 DoS Vulnerability (CVE-2017-1000494)

Uninitialized stack variable vulnerability in NameValueParserEndElt upnpreplyparse.c in miniupnpd allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might...

7.8CVSS7.9AI score0.00466EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2018/02/08 12:00 a.m.•47 views

Ubuntu 14.04 LTS / 16.04 LTS : MiniUPnP vulnerabilities (USN-3562-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3562-1 advisory. It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute...

7.8CVSS8.1AI score0.00466EPSS
SaveExploits1References2
osv_usn
osv_usn
•added 2018/02/07 6:43 p.m.•16 views

USN-3562-1 miniupnpc vulnerabilities

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library...

7.8CVSS7.3AI score0.00466EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2018/02/07 6:43 p.m.•86 views

USN-3562-1: MiniUPnP vulnerabilities

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits1
osv_mgasa
osv_mgasa
•added 2017/08/26 9:17 p.m.•19 views

MGASA-2017-0313 Updated miniupnpc packages fix security vulnerability

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library CVE-2017-8798...

9.8CVSS9.5AI score0.24027EPSS
SaveExploits6References3
Mageia
Mageia
•added 2017/08/26 9:17 p.m.•37 views

Updated miniupnpc packages fix security vulnerability

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library CVE-2017-8798...

9.8CVSS3.6AI score0.24027EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
•added 2017/05/25 12:00 a.m.•47 views

Ubuntu 17.04 : miniupnpc vulnerability (USN-3298-2)

USN-3298-1 fixed a vulnerability in MiniUPnP. This update provides the corresponding update for Ubuntu 17.04. It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the...

9.8CVSS8.4AI score0.24027EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
•added 2017/05/25 12:00 a.m.•56 views

Ubuntu 14.04 LTS / 16.04 LTS : MiniUPnP vulnerability (USN-3298-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3298-1 advisory. It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute...

9.8CVSS8.8AI score0.24027EPSS
SaveExploits6References2
Ubuntu
Ubuntu
•added 2017/05/24 2:14 p.m.•250 views

USN-3298-2: MiniUPnP vulnerability

USN-3298-1 fixed a vulnerability in MiniUPnP. This update provides the corresponding update for Ubuntu 17.04. Original advisory details: It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary co...

9.8CVSS8.7AI score0.24027EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2017/05/24 11:37 a.m.•114 views

USN-3298-1: MiniUPnP vulnerability

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library...

9.8CVSS8.5AI score0.24027EPSS
SaveExploits6
osv_usn
osv_usn
•added 2017/05/24 11:37 a.m.•21 views

USN-3298-1 miniupnpc vulnerability

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library...

9.8CVSS7.5AI score0.24027EPSS
SaveExploits6References2
Rows per page
Query Builder