9289 matches found
CVE-2016-7164
CVE-2016-7164 affects libtorrent ( Rasterbar) 1.1.0, where the construct function in puff.cpp can be triggered by a crafted GZIP response from remote torrent trackers, causing a denial of service via segmentation fault and crash. The vulnerability is triggered through network input and is exploit...
CVE-2016-7164
The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service segmentation fault and crash via a crafted GZIP response...
CVE-2016-7164
The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service segmentation fault and crash via a crafted GZIP response...
shopify-scripts: Segmentation fault while printing backtrace
The code below crashes the sandbox/mruby as it tries to print the backtrace. Incidentally, it does not crash mirb. def foon return '' if n \n' ensure % if:n != if n == -1110 else foon-1.% end end %foo0 We are still examining the bug and hope to produce a detailed analysis and a fix this week...
CVE-2016-5102
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...
Buffer overflow
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...
Denial Of Service (DoS) Through Memory Consumption And Application Crash
OpenSSL is vulnerable to denial of service DoS attacks through memory consumption and application crash. This is caused because the dtls1clearqueues function in d1lib.c frees data not taking into account that application data could arrive between the ChangeCipherSpec message and the Finished...
shopify-scripts: SIGSEGV - mrb_vm_exec - line:1312
PoC ------------------- The following code triggers the bug attached as mrbvmexec.rb: n s s k h GC.start ObjectSpace.eachobject|obj|obj Debug - mirb ------------------- gdb r mrbvmexec.rb The program being debugged has been started already. Start it from the beginning? y or n y Starting program:...
Internet Bug Bounty: Incorrect GC behavior in xxlimited could lead to use-after-free
Issue submitted: http://bugs.python.org/issue29398 xxlimited module exist only in Python3.6 compiled on Linux. Starting program: /usr/bin/python3.6 xlimited.py Thread debugging using libthreaddb enabled Using host libthreaddb library "/usr/lib/libthreaddb.so.1". Program received signal SIGSEGV,...
CVE-2016-6235
The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...
CVE-2016-6235
The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...
shopify-scripts: Denial of service (segfault) due to null pointer dereference in mrb_vm_exec
Introduction ============ Provided PoC segfaults at mrbvmexec due to null pointer dereference. Proof of concept ================ Attached the poc. Crash report ============ ./sandbox vmexec.rb ./sandbox:20: BUG Segmentation fault at 0x00000000000000 ruby 2.3.1p112 2016-04-26 x8664-linux-gnu --...
libevent -- multiple vulnerabilities
Debian Security reports: CVE-2016-10195: The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read. CVE-2016-10196: Stack-based buffer overflow in the...
shopify-scripts: SIGSEGV - vm.c - line:1214
PoC ------------------- The following code triggers the bug attached as testmrbvmexec1214.rb: def test instanceexec do return toenum:==end ensure end test Debug - mirb ------------------- gdb r testmrbvmexec1214.rb Starting program: /home/x/Desktop/research/3fuzz/mruby/bin/mirb testmrbvmexec1214....
SUSE-SU-2017:0304-1 Security update for gnutls
This update for gnutls fixes the following issues: - Malformed asn1 definitions could cause a segmentation fault in the asn1 definition parser bsc961491. - CVE-2016-8610: Remote denial of service in SSL alert handling bsc1005879. - CVE-2017-5335: Decoding a specially crafted OpenPGP certificate...
RHEL 6 : JBoss Core Services (RHSA-2017:0193)
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
PHP 5.6.x < 5.6.30 Multiple DoS
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.30. It is, therefore, affected by the following vulnerabilities : - A seg fault when loading hostile phar could be used to crash the PHP interpreter or potentially disclose information due to a buff...
mod_cluster: Protocol parsing logic error
An error was found in protocol parsing logic of modcluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process...
mod_cluster: Protocol parsing logic error
An error was found in protocol parsing logic of modcluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process...