libming denial of service vulnerability (CNVD-2018-09583)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A security vulnerability exists in the 'decompileJUMP' function of the decompile.c file in libming 0.4.8 and earlier versions, which stems from a failure of the program to correctly handle a...

UBUNTU-CVE-2018-11017

The newVarN function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-11017

CVE-2018-11017 affects the libming project (newVar_N in decompile.c) up to version 0.4.8. The root cause is a mismatch when the package header indicates a larger file size than the actual size, enabling a remote attacker to trigger a denial of service via segmentation fault and application crash....

CVE-2018-11017

The newVarN function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

MGASA-2018-0231 Updated afflib packages fix security vulnerability

A flaw was found in AFFLIB aka AFFLIBv3 through 3.7.16. The afgetpage function in lib/afflibpages.cpp allows remote attackers to cause a denial of service segmentation fault via a corrupt AFF image that triggers an unexpected pagesize value CVE-2018-8050...

Updated afflib packages fix security vulnerability

A flaw was found in AFFLIB aka AFFLIBv3 through 3.7.16. The afgetpage function in lib/afflibpages.cpp allows remote attackers to cause a denial of service segmentation fault via a corrupt AFF image that triggers an unexpected pagesize value CVE-2018-8050...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

DEBIAN-CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

ALPINE-CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

Code injection

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The vulnerability CVE-2018-10776 affects mp3gain (mpglibDBL/common.c, getbits) up to version 1.5.2-r2. The getbits function is exposed to remote inputs and can cause a denial of service via segmentation fault and application crash, with possible unspecified additional impact. Documents identify t...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

mp3gain Denial of Service Vulnerability

mp3gain is a volume adjustment application for MP3 files. A security vulnerability exists in the 'getbits' function in the mpglibDBL/common.c file in mp3gain 1.5.2-r2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and...

Design/Logic Flaw

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...