9374 matches found
Denial Of Service (DoS)
numpy is vulnerable to denial of service. A crash occurs when np.flat is indexed with an empty tuple. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...
Denial Of Service (DoS)
numpy is vulnerable to Denial Of Service DoS. A crash occurs in numpy.f2py when calling complex valued python functions from Fortran with GCC 4.8.3. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...
Denial Of Service (DoS)
numpy is vulnerable to denial of service. In systems without support in the underlying BLAS, a crash occurs when numpy.dot handles arrays with more than 231 elements or 16GB. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...
CVE-2019-15860
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002...
libjpeg, turbojpeg security update
CentOS Errata and Security Advisory CESA-2019:2052 An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Binaryen Code Issue Vulnerability
Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen is vulnerable to a code issue. An attacker could exploit this vulnerability via specially crafted input to cause a segmentation error, which could result in a denial of service...
Scientific Linux Security Update : libjpeg-turbo on SL7.x x86_64 (20190806)
Security Fixes : - libjpeg: NULL pointer dereference in cjpeg CVE-2016-3616 - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 - libjpeg-turbo: Divide By Zero in allocsarray function in jmemmgr.c CVE-2018-11212 -...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. The attack exists because it mishandled the NULL value in httpheadervalue in an HTTP response, causing a segmentation fault in an atoi in httpfopenwrapper.c...
php: Mishandled http_header_value in an atoi() call in http_fopen_wrapper.c
An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because httpheadervalue in ext/standard/httpfopenwrapper.c can be a NULL value that is mishandled in an atoi call...
ABC2MTEX 1.6.1 Stack Overflow
Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Date: 2019-08-13 Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link: https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz Version: 1.6.1 Tested on:...
ABC2MTEX 1.6.1 Stack Overflow Exploit
Exploit Title: ABC2MTEX 1.6.1 - Command Line Stack Overflow Exploit Author: Carter Yagemann Vendor Homepage: https://abcnotation.com/abc2mtex/ Software Link: https://github.com/mudongliang/source-packages/raw/master/CVE-2004-1257/abc2mtex1.6.1.tar.gz Version: 1.6.1 Tested on: Debian Buster An...
Fedora 29 : php (2019-f07db8f031)
PHP version 7.2.21 01 Aug 2019 Date: - Fixed bug php69044 discrepency between time and microtime. krakjoe EXIF: - Fixed bug php78256 heap-buffer-overflow on exifprocessusercomment. CVE-2019-11042 Stas - Fixed bug php78222 heap-buffer-overflow on exifscanthumbnail. CVE-2019-11041 Stas Fileinfo: -...
RHEL 7 : elfutils (RHSA-2019:2197)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2197 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...
Oracle Linux 8 : nss / and / nspr (ELSA-2019-1951)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1951 advisory. nspr 4.21.0-2 - Rebuild 4.21.0-1 - Update to NSPR 4.21 nss 3.44.0-7 - Backport fixes from 3.44.1 3.44.0-6 - Add continuous RNG test required by FIPS -...
RHEL 7 : qt5 (RHSA-2019:2135)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2135 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...
RHEL 7 : libjpeg-turbo (RHSA-2019:2052)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2052 advisory. The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessi...
RHEL 8 : nss and nspr (RHSA-2019:1951)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1951 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Fedora 30 : php (2019-ec40d89812)
PHP version 7.2.21 01 Aug 2019 Date: - Fixed bug php69044 discrepency between time and microtime. krakjoe EXIF: - Fixed bug php78256 heap-buffer-overflow on exifprocessusercomment. CVE-2019-11042 Stas - Fixed bug php78222 heap-buffer-overflow on exifscanthumbnail. CVE-2019-11041 Stas Fileinfo: -...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. A failure to check the dyn data read by the dwflsegmentreportmodule causes a segmentation fault in elf64xlatetom in libelf/elf32xlatetom.c...
libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c
An out-of-bounds read vulnerability has been discovered in libjpeg-turbo when reading one row of pixels of a PPM file. An attacker could use this flaw to crash the application and cause a denial of service...