4403 matches found
CVE-2016-4346
Integer overflow in the strpad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow...
CVE-2016-4345
Integer overflow in the phpfilterencodeurl function in ext/filter/sanitizingfilters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow...
CVE-2016-1835
Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document...
CVE-2016-1837
Multiple use-after-free vulnerabilities in the 1 htmlPArsePubidLiteral and 2 htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a...
CVE-2016-4073: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple integer overflows in the mbflstrcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted mbstrcut call...
PT-2016-2028
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.4 Apple iOS versions prior to 9.3.2 OS X versions prior to 10.11.5 tvOS versions prior to 9.2.1 watchOS versions prior to 2.2.1 Description The issue is caused by multiple use-after-free vulnerabilities in the...
PT-2016-4059
Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and crash, via crafted cpio files. Recommendations For versions prior to 3.2.0, update to version 3.2.0...
CVE-2016-2554: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted TAR archive...
CVE-2015-4644: Undefined Security Weakness
The phppgsqlmetadata function in pgsql.c in the PostgreSQL aka pgsql extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service NULL pointer dereference and...
Design/Logic Flaw
imlib2 before 1.4.9 allows remote attackers to cause a denial of service divide-by-zero error and application crash by drawing a 2x1 ellipse...
CVE-2014-9763
imlib2 before 1.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted PNM file...
CVE-2014-9771
Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service memory consumption or application crash via a crafted image, which triggers an invalid read operation...
CVE-2016-3993
Off-by-one error in the imlibMergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted coordinates...
CVE-2014-9763: Undefined Security Weakness
imlib2 before 1.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted PNM file...
CVE-2016-4476
CVE-2016-4476 details (normal mode) Affected: hostapd up to 2.5 and wpa_supplicant up to 2.5 (examples in Arch, Mageia, Debian advisories) where passphrase parameters are not rejected for newline/CR characters during WPS operations or local config changes. Impact: remote attacker can cause a deni...
CVE-2016-2454: Improper Input Validation
The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service reboot via a crafted file, aka internal bug 26221024...
PT-2016-5837
Name of the Vulnerable Software and Affected Versions jq versions 1.5 Description The issue allows remote attackers to cause a denial of service, resulting in stack consumption and application crash, via a crafted JSON file. This is due to a problem in the jv dump term function. Recommendations F...
CVE-2016-4008: Undefined Security Weakness
The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1DECODEFLAGSTRICTDER flag, allows remote attackers to cause a denial of service infinite recursion via a crafted certificate...
PT-2016-3308
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t and 1.0.2h MySQL Server versions 5.6.30 and earlier, 5.7.12 and earlier Description The issue is related to an integer overflow in the EVP EncodeUpdate function in OpenSSL, which can cause a denial of service o...
