CVE-2017-7892

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a...

asterisk -- Buffer Overrun in PJSIP transaction layer

The Asterisk project reports: A remote crash can be triggered by sending a SIP packet to Asterisk with a specially crafted CSeq header and a Via header with no branch parameter. The issue is that the PJSIP RFC 2543 transaction key generation algorithm does not allocate a large enough buffer. By...

389-ds-base security and bug fix update

1.3.5.10-20 - Bump version to 1.3.5.10-20 - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages 1.3.5.10-19 - Release 1.3.5.10-19 - Resolves: bug 1429495 - ns-slapd dies under heavy load - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsro...

HE-AAC+ Codec Integer Overflow Vulnerability

HE-AAC+ Codec is a library that provides audio codecs. An integer overflow vulnerability exists in the auchannel.h file of HE-AAC+ Codec. A remote attacker can exploit the vulnerability to construct a special audio file and trick the application into parsing it, which can crash the application...

389-ds-base security and bug fix update

1.2.1.11.15-91 - Release 1.2.11.15-91 - Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages 1.2.11.15-90 - Release 1.2.11.15-90 - Resovles: 1435365 - Unable to dereference unqiemember attribute because it is dn UID not dn syntax...

DEBIAN-CVE-2017-7597

tifdirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

radare2 'libr/bin/p/bin_bflt.c' heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the relocs function in radare2 version 1.2.1 libr/bin/p/binbflt.c, which allows remote attackers to exploit the vulnerability to cause a denial of service heap buffer overflow and...

UBUNTU-CVE-2017-7381

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the WriteMAPImage function in the coder/map.c file of the console-based image editing tool ImageMagick arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure termination of the application by using a...

GNU Binutils 'aout_link_add_symbols()' function remote denial of service vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

DEBIAN-CVE-2016-10057

Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

DEBIAN-CVE-2016-10051

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

UBUNTU-CVE-2016-10054

Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-04487)

ImageMagick is a set of open source image processing software. A denial of service vulnerability exists in the png coder in ImageMagick. A remote attacker could exploit this vulnerability to cause a denial of service crash...

PoDoFo 'PoDoFo::PdfParser::ReadXRefSubsection' function buffer overflow denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A buffer overflow vulnerability exists in PoDoFo's 'PoDoFo::PdfParser::ReadXRefSubsection' function. Allows a remote attacker to construct a malicious file and trick the user into parsing it, which can crash the...

bind: Too long query name causes segmentation fault in lwresd

It was found that the lightweight resolver protocol implementation in BIND could enter an infinite recursion and crash when asked to resolve a query name which, when combined with a search list entry, exceeds the maximum allowable length. A remote attacker could use this flaw to crash lwresd or...

Audio File Library heap buffer overflow vulnerability (CNVD-2017-03515)

Audio File Library aka audiofile is a processing library for reading and writing audio files. A heap buffer overflow vulnerability in the ulaw2linearbuf function in G711.cpp in version 0.3.6 of Audio File Library aka audiofile allows remote attackers to cause a denial of service crash via a...

Audio File Library Heap Buffer Overflow Vulnerability

Audio File Library aka audiofile is a processing library for reading and writing audio files. A heap buffer overflow vulnerability in the Expand3To4Module :: run function in Audio File Library version 0.3.6 libaudiofile/modules/SimpleModule.h allows remote attackers to cause a denial of service...

Audio File Library Denial of Service Vulnerability (CNVD-2017-03602)

Audio File Library aka audiofile is a processing library for reading and writing audio files. A denial of service vulnerability in the decodeSample function in IMA.cpp in Audio File Library aka audiofile version 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

Audio File Library heap buffer overflow vulnerability (CNVD-2017-03603)

Audio File Library aka audiofile is a processing library for reading and writing audio files. A heap buffer overflow vulnerability in the alaw2linearbuf function in G711.cpp in version 0.3.6 of Audio File Library aka audiofile allows remote attackers to cause a denial of service crash via a...