11030 matches found
UBUNTU-CVE-2018-16982
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
CVE-2018-16982
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
CVE-2018-16982
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
CVE-2018-16982
Open Chinese Convert (OpenCC) 1.0.5 is affected by CVE-2018-16982. The vulnerability resides in BinaryDict.cpp (BinaryDict::NewFromFile) where crafted .ocd files can lead to out-of-bounds keyOffset/valueOffset, causing a denial of service via segmentation fault. Several advisories confirm the fix...
CVE-2018-16982
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
CVE-2018-16982
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
PT-2018-19207
Name of the Vulnerable Software and Affected Versions Open Chinese Convert OpenCC version 1.0.5 Description The issue allows attackers to cause a denial of service, resulting in a segmentation fault. This occurs because the BinaryDict::NewFromFile function in BinaryDict.cpp may have out-of-bounds...
PT-2018-13818
Name of the Vulnerable Software and Affected Versions Lizard formerly LZ5 version 2.0 Description A denial of service issue was found, related to the use of an invalid memory address in the LZ5 compress continue function in lz5 compress.c, specifically with LZ5 compress fastSmall and MEM read32...
PT-2018-13815
Name of the Vulnerable Software and Affected Versions Open Chinese Convert OpenCC version 1.0.5 Description The issue allows attackers to cause a denial of service, resulting in a segmentation fault. This occurs because the BinaryDict::NewFromFile function in BinaryDict.cpp may have out-of-bounds...
CVE-2018-16982: Out-of-bounds Read
Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...
CVE-2018-16985: Out-of-bounds Read
In Lizard formerly LZ5 2.0, use of an invalid memory address was discovered in LZ5compresscontinue in lz5compress.c, related to LZ5compressfastSmall and MEMread32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
Product update: Virtuozzo 7.0 Update 8 Hotfix 3 (7.0.8-521)
This update provides stability fixes. Vulnerability id: PSBM-88084 Windows 2012R2 VMs could freeze due to virsh failing to create memory dumps. Vulnerability id: PSBM-88274 Container migration could fail due to a segmentation fault during CRIU restore. Vulnerability id: PSBM-88315 Host CPU could ...
[SECURITY] [DLA 1503-1] kamailio security update
Package : kamailio Version : 4.2.0-2+deb8u5 CVE ID : CVE-2018-16657 Debian Bug : 908324 It was discovered that there was a denial of service and a potential arbitrary code execution vulnerability in the kamailio SIP server. A specially-crafted SIP message with an invalid "Via" header could cause ...
Jsish Denial of Service Vulnerability
Jsish is a small JavaScript parser written in C with a built-in database . A denial of service vulnerability exists in JsiLogMsg jsiUtils.c:196 in Jsish version 2.4.67. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference and segmentation error...
CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...
CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...
DEBIAN-CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...
Input validation
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...
CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...
CVE-2018-16657
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcittstringarray core function for calculating a CRC hash for To tags. An additional error is present ...