CVE-2016-6379: Improper Input Validation

Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service device reload via crafted IP Detail Record IPDR packets, aka Bug ID CSCuu35089...

CVE-2013-4119

FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by disconnecting before authentication has finished...

CVE-2016-1371

ClamAV before 0.99.2 is affected by CVE-2016-1371 and CVE-2016-1372 (and related issues) due to parsing crafted mew packer and 7z files, enabling remote DoS or application crash. Affected component is libclamav/clamav daemons prior to 0.99.2; impact is partial availability denial of service. Debi...

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

CVE-2016-3634

CVE-2016-3634 affects LibTIFF up to version 4.0.6. The vulnerability exists in the tagCompare function in tif_dirinfo.c used by the thumbnail tool, causing an out-of-bounds read and potential crash (denial of service). Remediation per connected advisories is to upgrade to LibTIFF 4.0.7 or newer.

PT-2016-6297

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.143 Description A use-after-free issue in the V8 component of Google Chrome allows remote attackers to cause a denial of service, potentially leading to a crash, or possibly have other unspecified...

PT-2017-9189

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.24 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a file with an "unterminated" string. This is related to the TIFFGetField function ...

CVE-2016-6309

statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service use-after-free or possibly execute arbitrary code via a crafted TLS session...

CVE-2016-4736: Improper Restriction of Operations within the Bounds of a Memory Buffer

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

PT-2017-1552

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.5-8 Description The issue is caused by a buffer overflow in the WritePDBImage function in coders/pdb.c, allowing remote attackers to cause a denial of service application crash or have other unspecified impact...

CVE-2016-5427: Undefined Security Weakness

PowerDNS aka pdns Authoritative Server before 3.4.10 does not properly handle a . dot inside labels, which allows remote attackers to cause a denial of service backend CPU consumption via a crafted DNS query...

CVE-2016-6401: Undefined Security Weakness

Cisco Carrier Routing System CRS 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service line-card reload via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494...

PT-2016-3379

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11 Description The issue is caused by a buffer overflow in the ext/intl/msgformat/msgformat format.c component of the PHP interpreter. This can be exploited by a remote attacker to cau...

CVE-2016-6302

The tlsdecryptticket function in ssl/t1lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short...

PT-2017-6831

Name of the Vulnerable Software and Affected Versions JasPer JPEG-2000 library versions prior to 1.900.2 Description The issue is related to a use-after-free vulnerability in the mif process cmpt function. This vulnerability can be exploited by remote attackers using a crafted JPEG 2000 image fil...

CVE-2016-6375: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service device reload by sending crafted Inter-Access Point Protocol IAPP packets and then sending a traffic stream metrics TSM...

CVE-2016-5153: Undefined Security Weakness

The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service use-after-destruction or possibly have unspecified other...

PT-2016-5711

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-09-01 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL...

CVE-2016-7176: Improper Restriction of Operations within the Bounds of a Memory Buffer

epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service copy overlap and application crash via a crafted packet...

PT-2016-7255

Name of the Vulnerable Software and Affected Versions Wireshark versions prior to 2.0.6 ALT Linux affected versions not specified Description The issue is related to a stack-based buffer overflow in the Catapult DCT2000 dissector. This can be exploited by remote attackers via a crafted packet,...