Lucene search
+L

9289 matches found

OSV
OSV
added 2017/10/27 5:29 p.m.20 views

CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

7.5CVSS6.6AI score
SaveExploits0References2
CVE
CVE
added 2017/10/27 5:0 p.m.75 views

CVE-2017-15928

Ox gem for Ruby (version 2.8.0) is affected by CVE-2017-15928: parsing crafted input with parse_obj can crash the process with a segmentation fault. The NVD entry provides CVSS vectors (2.0/3.0) and a base score of 5.0 (CVSS2) / 7.5 (CVSS3), indicating a high severity under CVSS3 but partial impa...

7.5CVSS7.2AI score0.01713EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2017/10/27 5:0 p.m.28 views

CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

7.4AI score0.01713EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2017/10/27 5:0 p.m.68 views

CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

7.5CVSS7.4AI score0.01713EPSS
SaveExploits1
RubySec
RubySec
added 2017/10/27 12:0 a.m.22 views

ox ruby gem segmentation fault via parse_obj

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

7.5CVSS1.9AI score0.01713EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/10/23 12:0 a.m.39 views

openSUSE Security Update : exiv2 (openSUSE-2017-1180)

This update for exiv2 fixes the following issues : Security issues fixed : - CVE-2017-11591: There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input. boo1050257 - CVE-2017-11683: There is a reachable...

7.5CVSS6.6AI score0.03098EPSS
SaveExploits3References10
UbuntuCve
UbuntuCve
added 2017/10/18 2:29 p.m.38 views

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

6.2CVSS6.8AI score0.00466EPSS
SaveExploits1References2
NVD
NVD
added 2017/10/18 2:29 p.m.22 views

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

6.2CVSS6.2AI score0.00466EPSS
SaveExploits1References6
Prion
Prion
added 2017/10/18 2:29 p.m.23 views

Design/Logic Flaw

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

2.1CVSS6.6AI score0.00466EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2017/10/18 2:29 p.m.8 views

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

6.2CVSS7.2AI score
SaveExploits0References6
CVE
CVE
added 2017/10/18 2:0 p.m.71 views

CVE-2011-5320

CVE-2011-5320 affects the GNU C Library (glibc) where scanf and related input functions are vulnerable in versions prior to 2.15. A crafted large string of 0s can trigger a local denial of service (segmentation fault). The impact is limited to local attackers with access to the system and is not ...

6.2CVSS6.5AI score0.00466EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2017/10/18 2:0 p.m.25 views

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

6.2AI score0.00466EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2017/10/18 2:0 p.m.47 views

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

6.2CVSS6.2AI score0.00466EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2017/10/17 2:29 p.m.22 views

CVE-2014-8323

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

7.5CVSS7.2AI score0.03299EPSS
SaveExploits0References3
Prion
Prion
added 2017/10/17 2:29 p.m.12 views

Code injection

network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

5CVSS6.8AI score0.04172EPSS
SaveExploits0References9Affected Software1
UbuntuCve
UbuntuCve
added 2017/10/17 2:29 p.m.13 views

CVE-2014-8324

network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

7.5CVSS7.2AI score0.04172EPSS
SaveExploits0References3
Prion
Prion
added 2017/10/17 2:29 p.m.17 views

Code injection

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

5CVSS6.8AI score0.03299EPSS
SaveExploits0References10Affected Software1
NVD
NVD
added 2017/10/17 2:29 p.m.14 views

CVE-2014-8323

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

7.5CVSS7.2AI score0.03299EPSS
SaveExploits0References10
OSV
OSV
added 2017/10/17 2:29 p.m.5 views

DEBIAN-CVE-2014-8323

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

7.5CVSS7.6AI score0.03299EPSS
SaveExploits0References1
OSV
OSV
added 2017/10/17 2:29 p.m.7 views

CVE-2014-8323

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

7.5CVSS8.9AI score
SaveExploits0References15
Rows per page
Query Builder