9289 matches found
SUSE-SU-2016:1504-1 Security update for php5
This update for php5 fixes the following issues: Security issues fixed: - CVE-2016-4346: heap overflow in ext/standard/string.c bsc977994 - CVE-2016-4342: heap corruption in tar/zip/phar parser bsc977991 - CVE-2016-4537, CVE-2016-4538: bcpowmod accepts negative scale causing heap buffer overflow...
ImageMagick Information Disclosure And Denial Of Service Vulnerabilities - Mac OS X
ImageMagick is prone to information disclosure and denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Internet Bug Bounty: Integer Overflow in _gd2GetHeader() resulting in heap overflow
The gd2GetHeader is prone to an integer overflow, which result in heap based overflow. Tested on PHP 5.6.22 --------------- PoC --------------- $ ls poc.gd poc.php $ cat poc.php --------------- Result --------------- /php$ gdb -q --args ./php-5.6.22/sapi/cli/php poc.php Reading symbols from...
SUSE-SU-2016:1481-1 Security update for imlib2
This update for imlib2 fixes the following issues: Security issues fixed: - CVE-2016-3994: Potential DOS in giflib loader bsc973759 - CVE-2016-3993: Off buy 1 in merge update bsc973761 - CVE-2014-9764: fix segmentation fault when opening specifically crafted input bsc963797 - CVE-2014-9763: Preve...
squid: SIGSEGV in ESIContext response handling
An incorrect reference counting flaw was found in the way Squid processes ESI responses. If Squid is configured as reverse-proxy, for TLS/HTTPS interception, an attacker controlling a server accessed by Squid, could crash the squid worker, causing a Denial of Service attack...
CVE-2016-4539
The xmlparseintostruct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service buffer under-read and segmentation fault or possibly have unspecified other impact via crafted XML data in the second argument,...
Design/Logic Flaw
The xmlparseintostruct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service buffer under-read and segmentation fault or possibly have unspecified other impact via crafted XML data in the second argument,...
CVE-2016-4539
The xmlparseintostruct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service buffer under-read and segmentation fault or possibly have unspecified other impact via crafted XML data in the second argument,...
4digits 1.1.4 - Local Buffer Overflow (PoC)
4digits 1.1.4 - Local Buffer Overflow PoC 4digits 1.1.4 Local Buffer Overflow Privilege Escalation if setuid/setgid Discoverd by NA , NA at tutanota.com Downloaded and tested upon Kali Linux Vendor has been notified. Description ------------- 4digits is a guess-the-number puzzle game. It's also...
expat: arbitrary code execution
CVE-2015-1283 arbitrary code execution Multiple integer overflows in the XMLGetBuffer function allow remote attackers to cause a denial of service heap-based buffer overflow or possibly arbitrary code execution via crafted XML data. This problem has already been fixed in version 2.1.0-1 but this...
dosfstools Segment Error Vulnerability
dosfstools is a set of open source command line utilities , it supports the user to be able to easily and quickly create labels and check the GNU/Linux operating system in the MS-DOS FAT file system , etc. . A security vulnerability exists in the 'readboot' function of dosfstools, which stems fro...
expat -- denial of service vulnerability on malformed input
Gustavo Grieco reports: The Expat XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial...
CVE-2015-5589
The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other...
CVE-2015-8873
Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls...
CVE-2015-8873
CVE-2015-8873 affects PHP's Zend engine (Zend/zend_exceptions.c) and enables a denial-of-service (segmentation fault) via recursive method calls. The vulnerability is present in PHP releases prior to 5.4.44, 5.5.x prior to 5.5.28, and 5.6.x prior to 5.6.12. The root cause is a stack consumption i...
CVE-2015-8873
Stack consumption vulnerability in Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service segmentation fault via recursive method calls...
DEBIAN-CVE-2014-9764
imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a crafted GIF file...
CVE-2014-9764
CVE-2014-9764 affects imlib2, specifically the GIF loader. A crafted GIF can cause a segmentation fault (DoS) in versions before 1.4.7. Connected advisories show multiple vendors addressing imlib2 GIF/PNM/GIF-w/o-colormap issues; patches upgrade imlib2 to at least 1.4.9 (openSUSE openSUSE-2016-60...
CVE-2014-9762
CVE-2014-9762 affects imlib2 before 1.4.7; GIF images without a colormap can trigger a denial of service (segfault). Connected advisories (openSUSE, Gentoo GLSA, Debian DSA, Ubuntu USN) confirm the issue and show remediation by upgrading imlib2 to a newer release (e.g., openSUSE-2016-600 patches ...
