4405 matches found
CVE-2016-10326
The CVE-2016-10326 entry affects libosip2 (GNU oSIP 4.1.0). A malformed SIP message can trigger a heap buffer overflow in osip_body_to_str() (osipparser2/osip_body.c), causing a remote DoS. Connected advisories confirm related issues across distributions (e.g., Debian DLA-898-1, SUSE/openSUSE upd...
CVE-2016-10326: Improper Restriction of Operations within the Bounds of a Memory Buffer
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...
CVE-2017-7853: Improper Restriction of Operations within the Bounds of a Memory Buffer
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...
osip -- Improper Restriction of Operations within the Bounds of a Memory Buffer
osip developers reports: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...
PT-2017-2097
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 through 7.5 Description The issue is caused by a stack-based buffer overflow in the SAPSTARTSRV service of the SAP NetWeaver platform. This allows remote attackers to cause a denial of service by sending a crafted...
CVE-2016-5041: NULL Pointer Dereference
dwarfmacro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a debugging information entry using DWARF5 and without a DWATname...
CVE-2017-7600
LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7598
tifdirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...
CVE-2017-7602
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7605: Reachable Assertion
aacplusenc.c in HE-AAC+ Codec aka libaacplus 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file...
PT-2017-17827
Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to an "outside the range of representable values of type float" undefined behavior, potentially allowing remote attackers to cause a denial of service, such as an application crash, or...
PT-2017-17832
Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to undefined behavior caused by a "shift exponent too large for 64-bit type long" in LibTIFF, potentially allowing remote attackers to cause a denial of service, such as an application...
PT-2017-17837
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-4 Description The issue is related to an "outside the range of representable values of type unsigned char" undefined behavior in the coders/rle.c file. This could potentially allow remote attackers to cause a denial o...
CVE-2017-7604: Improper Input Validation
auchannel.h in HE-AAC+ Codec aka libaacplus 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file...
CVE-2017-0552
A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...
PT-2017-1916
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description The issue is related to insufficient access control in the libavc service of the Mediaserver application in the Android operating system. It allows a remote attacker to cause a device hang or rebo...
CVE-2017-7578: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...
PT-2017-1915
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is related to inadequate...
