CVE-2014-8768

Multiple Integer underflows in the geonetprint function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service segmentation fault and crash via a crafted length value in a Geonet frame...

Integer overflow

Multiple Integer underflows in the geonetprint function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service segmentation fault and crash via a crafted length value in a Geonet frame...

CVE-2014-8768

CVE-2014-8768 affects tcpdump 4.5.0–4.6.2 when run in verbose mode, allowing a remote attacker to trigger a denial of service (segmentation fault/crash) via a crafted Geonet frame length. Multiple connected advisories group this with other tcpdump/CVE issues. The repackaged advisories indicate fi...

CVE-2014-8768

Multiple Integer underflows in the geonetprint function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service segmentation fault and crash via a crafted length value in a Geonet frame...

CVE-2014-8768

Multiple Integer underflows in the geonetprint function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service segmentation fault and crash via a crafted length value in a Geonet frame...

CVE-2014-8769

tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service packet loss or segmentation fault via a crafted Ad hoc On-Demand Distance Vector AODV packet, which triggers an out-of-bounds memory access...

CVE-2014-3916

The strbufcat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string...

CVE-2014-3916

The strbufcat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string...

Code injection

The strbufcat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string...

CVE-2014-3916

The strbufcat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string...

CVE-2014-3916

The CVE-2014-3916 entry describes a denial-of-service in Ruby caused by the str_buf_cat function in string.c for Ruby versions 1.9.3, 2.0.0, and 2.1, where processing a long string can trigger a segmentation fault/crash. The vulnerability is context-dependent and arises from the internal string b...

CVE-2014-8566

The modauthmellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service segmentation fault via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."...

Design/Logic Flaw

The modauthmellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service segmentation fault via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."...

CVE-2014-8566

CVE-2014-8566 affects the mod_auth_mellon module prior to version 0.8.1. The root cause is a session handling flaw where sessions overlap in memory, described as a “session overflow,” which can allow remote attackers to disclose sensitive information or trigger a denial of service (segmentation f...

CVE-2014-4975

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service segmentation fault via vectors that trigger a stack-based buffer overflow...

Stack overflow

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service segmentation fault via vectors that trigger a stack-based buffer overflow...

CVE-2014-4975

CVE-2014-4975 is an off-by-one stack-based buffer overflow in the encodes() function (pack.c) of Ruby 1.9.3 and earlier, and 2.x through 2.1.2, triggered by certain format string specifiers. This can cause a denial of service via segmentation fault. Connected advisories note this Ruby pack() issu...

FreeBSD : file -- buffer overruns and missing buffer size tests (84203724-296b-11e4-bebd-000c2980a9f3)

Christos Zoulas reports : A specially crafted file can cause a segmentation fault. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

Fedora 19 : v8-3.14.5.10-11.fc19 (2014-9113)

TJ Fontaine of the Node.js project reports : A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10. In certain circumstances, a particularly deep recursive workload that may trigger a GC and receive an...

CentOS 7 : qemu-kvm (CESA-2014:0927)

Updated qemu-kvm packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...