10185 matches found
UBUNTU-CVE-2017-5666
The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...
DEBIAN-CVE-2017-5851
The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...
CVE-2017-5851
The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file. NOTE: this typically has no risk; this crash of this command-line program has no further consequences for availability...
CVE-2017-5666
The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service invalid free and crash via a crafted file...
PT-2017-16658
Name of the Vulnerable Software and Affected Versions mp3splt version 2.6.2 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid free and crash, via a crafted file. This is due to a problem in the free options function in options manager.c...
OverThruster - HID Attack Payload Generator For Arduinos
OverThruster is a tool to generate sketches for Arduinos when used as an HID Attack. It was designed around devices with the ATMEGA32U4 chip, like the CJMCU-BEETLE, or the new LilyGo "BadUSB" devices popping up on ebay and aliexpress that look like USB sticks but contain an Arduino. I wrote this...
SUSE-SU-2017:0554-1 Security update for util-linux
This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...
CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
Code injection
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
CVE-2017-5970
Summary (CVE-2017-5970): The Linux kernel (ipv4_pktinfo_prepare in net/ipv4/ip_sockglue.c) up to version 4.9.9 is affected. A flaw can cause a denial of service (system crash) when triggered by (1) crafted system calls from an application or (2) IPv4 traffic carrying invalid IP options. The root ...
CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
UBUNTU-CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
ntfs-3g - Unsanitized modprobe Environment Privilege Escalation
ntfs-3g - Unsanitized modprobe Environment Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1072 ntfs-3g is installed by default e.g. on Ubuntu and comes with a setuid root program /bin/ntfs-3g. When this program is invoked on a system whose kernel does not...
CVE-2017-5970
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options...
Mp3splt 'options_manager.c' Denial of Service Vulnerability
Mp3splt is an mp3 music cutter. A denial of service vulnerability exists in Mp3splt 'optionsmanager.c'. An attacker exploiting this vulnerability is the application crashes, causing a denial of service...
Mp3splt 'free_options()' function null pointer reference denial of service vulnerability
Mp3splt is an mp3 music cutter. A denial of service vulnerability exists in the Mp3splt 'freeoptions' function. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...
CVE-2016-0210
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-0210
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...