Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the Exiv2::XmpParser::terminate function where a segmentation fault could occur, causing the DoS...

Denial Of Service (DoS) Through Heap Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow. The vulnerability exists in Image::printIFDStructure of mage.cpp where a heap-based buffer overflow could occur, causing the DoS...

Denial Of Service (DoS) Through Infinite Loop

libexiv2.so is vulnerable to denial of service DoS through infinite loop. The vulnerability exists in Exiv2::Image::printIFDStructure of image.cpp where an infinite loop could occur, causing the DoS...

Denial Of Service (DoS) Through Invalid Free

libexiv2.so is vulnerable to denial of service DoS through invalid free. The vulnerability exists in Action::TaskFactory::cleanup of actions.cpp where an invalid free condition could be reached, leading to a DoS...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists through an invalid free issue in image.cpp which causes the DoS attack...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a floating point exception in the Exiv2::ValueType function where a DoS attack would occur...

Denial Of Service (DoS) Through Null Pointer Dereference

libexiv2.so is vulnerable to denial of service DoS through null-pointer dereference attacks. The vulnerability exists in Exiv2::Image::printIFDStructure of image.cpp where a null-pointer dereference was possible leading to a DoS attack...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory dereference attacks. The vulnerability exists in Exiv2::getULong in types.cpp where parsing an image with invalid exif values would cause a denial of service DoS...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

Denial Of Service (DoS)

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the DecodeHeader function in io-ico.c to cause a out-of-bounds read that can crash the application...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflows. A malicious user can pass a jpg file to the LoaderTiff::getData function in preview.cpp to cause a buffer overflow that can crash the application or execute arbitrary code...

Remote Code Execution (RCE)

libxml2.so is vulnerable to remote code execution RCE attacks. The application does not forbid namespace nodes in XPointer ranges, allowing a malicious user to inject and execute arbitrary code...

Denial Of Service (DoS)

libtasn1.so is vulnerable to denial of service DoS. The attack exists because it allows a two-byte stack overflow while decoding DER encoded data in asn1derdecoding, leading to the DoS attack and possibly other attacks...

Container Check Bypass

libkrb5.so is vulnerable to checking bypass. It can be done when an authenticated kadmin user with permissions to add principals to an LDAP Kerberos database provides both a linkdn and containerd database argument, or by providing a DN string which is a left extension of a container DN string but...

Heap overflow

DISPUTED TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS attacks. A malicious user can pass a XML file to the htmlParseName function in HTMLparser.c to cause a buffer overread that can crash the application...