PT-2018-3298 · Mutt +5 · Mutt +5

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: The issue is related to the imap quote string function in the imap/util.c file of the Mutt and NeoMutt email clients. This function does not account for quote...

The vulnerability of the ext4_iget function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ext4iget function fs/ext4/inode.c in the Linux kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by using a specially crafted version of the ext4 file system...

The vulnerability of the Android wireless network driver from the CAF repository, which allows a hacker to cause a service failure.

The vulnerability of the Android wireless network driver from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the libmpeg2 library in the Media Framework component of the Android operating system allows a hacker to induce a service failure.

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libavc library in the Media Framework component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the libavc library used in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the libavc library in the Media Framework component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the libavc library in the Media Framework component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the libavc library in the Media Framework component of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to induce a service failure.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the VNC server emulator implementation of QEMU allows a hacker to induce a maintenance failure.

The vulnerability of the VNC server emulation implementation of QEMU is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation, allowing an attacker to cause a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation, when changing the size of image objects in the developer mode. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Fetch API interface in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to trigger a service failure.

The vulnerability of the Fetch API interface in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the ANGLE graphic library in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the ANGLE graphics library in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the transmission of incorrect values within the library. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the implementation of the WebSockets technology in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a attacker to trigger a service failure.

The vulnerability in the implementation of the WebSockets technology in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Anonymous Key Exchanges Supported (PCI DSS)

At least one of the SSL or TLS services on the remote host supports an anonymous DH or anonymous ECDH cipher. When an anonymous cipher is used, the client does not authenticate the server and an attacker may intercept and modify encrypted traffic. C Tenable Network Security, Inc...

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the asn1_check_identifier function in the libtasn1 library allows a attacker to cause a service failure.

The vulnerability of the asn1checkidentifier function in the libtasn1 library is related to pointer dereferencing errors failure to check the value of a pointer to be equal to NULL when reading from an input stream. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library, which allows a hacker to cause a service failure.

The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library arises from a read operation that occurs outside the buffer’s boundaries in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the uncompress function in ImfZip.cpp of the OpenEXR library, which allows a hacker to trigger a service failure

The vulnerability of the uncompress function in the ImfZip.cpp library related to numerical processing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

DEBIAN-CVE-2017-17820

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...