The vulnerability of the ProcessMSLScript function in the coder’s msl.c file of the console-based graphic editor ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the ProcessMSLScript function in the code “coders/msl.c” of the console-based graphic editor ImageMagick arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service...

DEBIAN-CVE-2015-7692

The cryptoxmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service crash. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750...

DEBIAN-CVE-2015-7702

The cryptoxmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service crash. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750...

eapmd5pass 'assess_packet' function out-of-bounds read vulnerability

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. An out-of-bounds read vulnerability exists in the 'assesspacket' function of eapmd5pass.c:134 in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network...

eapmd5pass 'assess_packet' function out-of-bounds read vulnerability (CNVD-2017-19451)

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. An out-of-bounds read vulnerability exists in the 'assesspacket' function of eapmd5pass.c:211 in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network...

gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks

Multiple use-after-free vulnerabilities in the 1 gstminiobjectunref, 2 gsttaglistunref, and 3 gstmxfdemuxupdateessencetracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service crash via vectors involving stream tags, as demonstrated by 02785736.mxf...

gtk-vnc: Integer overflow when processing SetColorMapEntries

An integer overflow flaw was found in gtk-vnc. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library...

tcpdump: force printer vulnerability

The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2017-11670

A length validation leading to out-of-bounds read and write flaw was found in the way eapmd5pass 1.4 handled network traffic in the extracteapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic...

ALPINE-CVE-2017-11665

The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...

Windows SMB Zero Day to Be Disclosed During DEF CON

LAS VEGAS—A 20-year-old Windows SMB vulnerability is expected to be disclosed Saturday during a talk at DEF CON. Microsoft has said it will not patch the vulnerability, which allows an attacker to remotely crash a Windows server with relative ease using only 20 lines of Python code and a Raspberr...

freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63

An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request...

PHP 'zend_ini_do_op()' function buffer overflow vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability in the 'zendinidoop' function in the Zend/zendiniparser.c file in PHP allows remote attackers to exploit the vulnerability to submit a special...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.0.4-i586-1slack14.2.txz: Upgraded. This release fixes two remote crash issues as well as a few bugs. For more...

DEBIAN-CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

openssl: Possible integer overflow vulnerabilities in codebase

Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash...

ALPINE-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...

FFmpeg 'color_string_to_rgba' function stack buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A stack buffer overflow vulnerability exists in the 'colorstringtorgba' function in the libavcodec/xpmdec.c file in FFmpeg. A remote attacker can exploit this vulnerability to cause a denia...

CVE-2017-9982

TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service application crash via the Unicode character followed by the Unicode character...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...