UBUNTU-CVE-2017-12883

Buffer overflow in the SgrokbslashN function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service application crash via a crafted regular expression with an invalid '\NU+...' escape...

Tcpdump LMP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LMP parser is one of the link management protocol parsers. A buffer...

PT-2017-3183 · Bchunk +1 · Bchunk +1

Name of the Vulnerable Software and Affected Versions: bchunk versions 1.2.0 through 1.2.1 Description: The issue is related to pointer dereference errors. It can be exploited by a remote attacker using a specially crafted .cue file, potentially causing the application to crash. The problem arise...

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a file archiver for the UnRAR archive format, allows a malicious actor to cause the application to terminate abnormally.

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a tool for decompressing UnRAR files, arises from operations that go beyond the boundaries of memory buffers reading from locations outside of memory space. Exploiting this vulnerability can allow an attacker to cause t...

FreeBSD : asterisk -- Remote Crash Vulerability in res_pjsip (ec1df2a1-8ee6-11e7-8be8-001999f8d30b)

The Asterisk project reports : A carefully crafted URI in a From, To or Contact header could cause Asterisk to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020...

Debian DLA-1079-1 : libdbd-mysql-perl security update

The Perl library for communicating with MySQL database, used in the 'mysql' commandline client is vulnerable to a man in the middle attack in SSL configurations and remote crash when connecting to hostile servers. CVE-2017-10788 The DBD::mysql module through 4.042 for Perl allows remote attackers...

asterisk -- Remote Crash Vulerability in res_pjsip

The Asterisk project reports: A carefully crafted URI in a From, To or Contact header could cause Asterisk to crash...

libfpx Denial of Service Vulnerability (CNVD-2017-25762)

libfpx is a library for manipulating FlashPIX images. A denial of service vulnerability exists in PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx, which can be exploited by remote attackers to cause a denial of service null pointer dereference via a specially crafted fpx image...

GNU Binutils C++ symbol demangler routine denial of service vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for working with target files and archives. libiberty is one of the librarie...

UBUNTU-CVE-2017-12950

The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted gig file...

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

Design/Logic Flaw

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

CVE-2017-12784

CVE-2017-12784 affects Youngzsoft CCFile (CC File Transfer) v3.6. A remote attacker can crash the application by sending a crafted HTTP request (example: header with many | characters) without authentication, causing a denial of service. Multiple sources corroborate a publicly reported DoS impact...

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability

GNU Binutils is a set of programming language utility programs developed by the GNU Project. A security vulnerability in the 'getsym' function of the tekhex.c file of the GNU Binutils BFD library allows remote attackers to exploit the vulnerability by submitting a special tekhex binary file, whic...

USN-3395-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled certain NAPTR responses. A remote attacker could possibly use this issue to cause applications using c-ares to crash, resulting in a denial of service...

httpd: ap_find_token() buffer overread

A buffer over-read flaw was found in the httpd's apfindtoken function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request...

Mozilla Firefox suffers from a misreference vulnerability (CNVD-2017-22794)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. WebSockets is one of the functionality to support the browser to communicate with the server module. A memory misreference vulnerability exists in WebSockets in versions of Mozilla Firefox prior to 55. A...