4404 matches found
PT-2017-16942
Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to ecceafe3abba2714ef9b432035fe0739d9b1a283 Description The issue is related to multiple use-after-free vulnerabilities in the gx image enum begin function. These vulnerabilities can be exploited by remote attackers...
PT-2017-8503
Name of the Vulnerable Software and Affected Versions libiberty affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, through a crafted binary. This is related to ktypevec. There is no information...
PT-2017-8502
Name of the Vulnerable Software and Affected Versions libiberty affected versions not specified Description The issue is related to a use-after-free condition in libiberty, allowing remote attackers to cause a denial of service, resulting in a segmentation fault and crash. This is achieved throug...
PT-2017-8655
Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service NULL pointer dereference via an object file with empty bss-like sections. This is due to a problem in the print frame inst bytes...
PT-2017-9216
Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via crafted input. This is due to a problem in the read line table program function in dwarf li...
CVE-2016-5030: NULL Pointer Dereference
The dwarfcalculateinfosectionendptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...
PT-2017-2349
Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 2017-03-14 Description The issue is related to an out-of-bounds write in the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx. This is caused by a buffer overflow in dynamic memory. Exploitation of the...
CVE-2016-7477
The CVE-2016-7477 entry concerns Libav 11.7. The vulnerable component is the function ff_put_pixels8_xy2_mmx in rnd_template.c, where a crafted mp3 file can trigger a denial of service via invalid memory access that crashes the application. The issue was originally noted as involving a NULL point...
CVE-2017-5896
Heap-based buffer overflow in the fzsubsamplepixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted image...
Fedora 24 : bitlbee (2017-6694f5cd3a)
BitlBee 3.5.1 30 Jan 2017 =========================== - purple: Fix crash on file transfer requests from unknown contacts. This was the result of an incomplete fix in the previous release and may result in remote DoS. Read the full security advisory at: https://bugs.bitlbee.org/ticket/1282 - Afte...
PT-2017-8403
Name of the Vulnerable Software and Affected Versions libjpeg affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, or potentially execute arbitrary code. This is achieved through ...
CVE-2016-2147
Integer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write...
CVE-2016-6173
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
CVE-2016-6171: Uncontrolled Resource Consumption
Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service memory exhaustion and slave server crash via a large zone transfer for 1 DDNS, 2 AXFR, or 3 IXFR...
Fedora 25 : bitlbee (2017-deb82f0c0d)
BitlBee 3.5.1 30 Jan 2017 =========================== - purple: Fix crash on file transfer requests from unknown contacts. This was the result of an incomplete fix in the previous release and may result in remote DoS. Read the full security advisory at: https://bugs.bitlbee.org/ticket/1282 - Afte...
CVE-2016-1504
dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...
CVE-2015-7599: Integer Overflow or Wraparound
Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...
spice-server security update
0.12.4-13.2 - Fix buffer overflow in mainchannelallocmsgrcvbuf when reading large messages. Resolves: CVE-2016-9577 - Fix remote DoS via crafted message. Resolves: CVE-2016-9578...
OpenBSD HTTP Server 6.0 Denial Of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html Date...