CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c is vulnerable to causing a denial of service (Segmentation Fault) when presented with an invalid ISALNUM argument. This is the concrete technical detail across connected documents: affected software is tidy-html5/tidy (Tidy) version 5.5.31; t...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

BSA-2017-364

Security Advisory ID : BSA-2017-364 Component : Apache HTTPD Revision : 2.0: Final The HTTP strict parsing changes added in Apachehttpd2.2.32 and 2.4.24 introduced a bug in token list parsing, which allowsapfindtokento search past the end of its input string. By maliciously crafting a sequence of...

MGASA-2017-0298 Updated apache packages fix security vulnerabilities

In Apache httpd before 2.4.27, the value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by modauthdigest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized poo...

CVE-2017-12966

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

CVE-2017-12966

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

Code injection

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

CVE-2017-12966

CVE-2017-12966 affects ASN.1 compiler ASN1C (version 0.9.28) and its libasn1fix.a, with the flaw located in the asn1f_lookup_symbol_impl function in asn1fix_retrieve.c. A remote attacker can trigger a denial of service (segmentation fault) by providing a specially crafted .asn1 file. The vulnerab...

Code injection

The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service segmentation fault and process crash and execute arbitrary code via a crafted JPG...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2017-1157)

According to the version of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attackers to cause a...

glibc: Segmentation fault caused by passing out-of-range data to strftime()

It was found that out-of-range time values passed to the strftime function could result in an out-of-bounds memory access. This could lead to application crash or, potentially, information disclosure...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply...

DivFix++ 0.34 - Denial of Service

DivFix++ denial of service vulnerability ================ Author : qflb.wu =============== Introduction: ============= DivFix++ is FREE AVI Video Fix & Preview program. Affected version: ===== v0.34 Vulnerability Description: ========================== the DivFixppCore::aviheaderfix function in...

UBUNTU-CVE-2017-11665

The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...

UBUNTU-CVE-2017-11638

GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642...

DEBIAN-CVE-2017-11638

GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

TCPDUMP Denial of Service Vulnerability (CNVD-2017-25448)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A security vulnerability exists in the 'compressedslprint' functio...