CVE-2017-2630

A stack buffer overflow flaw was found in the Quick Emulator QEMU built with the Network Block Device NBD client support. The flaw could occur while processing server's response to a 'NBDOPTLIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or...

BusyBox Integer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the DHCP client udhcpc in BusyBox versions prior to 1.25.0. A remote attacker can exploit this vulnerability to cause...

DEBIAN-CVE-2017-5848

The gstpsdemuxparsepsm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service invalid memory read and crash via vectors involving PSM parsing...

DEBIAN-CVE-2017-5843

Multiple use-after-free vulnerabilities in the 1 gstminiobjectunref, 2 gsttaglistunref, and 3 gstmxfdemuxupdateessencetracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service crash via vectors involving stream tags, as demonstrated by 02785736.mxf...

UBUNTU-CVE-2017-5843

Multiple use-after-free vulnerabilities in the 1 gstminiobjectunref, 2 gsttaglistunref, and 3 gstmxfdemuxupdateessencetracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service crash via vectors involving stream tags, as demonstrated by 02785736.mxf...

DEBIAN-CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

spice: Remote DoS via crafted message

A vulnerability was discovered in SPICE in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash...

Tcpdump Multiple Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. A buffer overflow vulnerability in Tcpdump's multiple parsers print-ether.c:etherprint allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump ISO CLNS parser buffer overflow vulnerability (CNVD-2017-01239)

Tcpdump is a popular network analysis program. A buffer overflow vulnerability in the Tcpdump ISO CLNS parser addrtoname.c:lookupnsap allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump Q.933 Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump Q.933 parser print-fr.c:q933print suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

Tcpdump SNMP Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump SNMP parser print-snmp.c:asn1parse suffers from a buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request to crash the application...

Tcpdump IPv6 Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump IPv6 parser print-ip6.c:ip6print suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

Tcpdump ISO CLNS Parser Buffer Overflow Vulnerability

Tcpdump is a popular network analysis program. Tcpdump ISO CLNS parser print-isoclns.c:clnpprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...

USN-3184-1 irssi vulnerabilities

It was discovered that the Irssi buf.pl script set incorrect permissions. A local attacker could use this issue to retrieve another user's window contents. CVE-2016-7553 Joseph Bisch discovered that Irssi incorrectly handled comparing nicks. A remote attacker could use this issue to cause Irssi t...

DEBIAN-CVE-2017-5601

An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive...

ALPINE-CVE-2017-5601

An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive...

UBUNTU-CVE-2017-5601

An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive...

openssl: Possible integer overflow vulnerabilities in codebase

Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash...

DEBIAN-CVE-2016-6920

Heap-based buffer overflow in the decodeblock function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service application crash via vectors involving tile positions...

DEBIAN-CVE-2016-5316

Out-of-bounds read in the PixarLogCleanup function in tifpixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool...