CVE-2018-11017

CVE-2018-11017 affects the libming project (newVar_N in decompile.c) up to version 0.4.8. The root cause is a mismatch when the package header indicates a larger file size than the actual size, enabling a remote attacker to trigger a denial of service via segmentation fault and application crash....

CVE-2018-11017

The newVarN function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

PT-2018-10241

Name of the Vulnerable Software and Affected Versions libming versions 0.4.8 and earlier Description The issue is related to the newVar N function in decompile.c, which mishandles cases where the header indicates a file size greater than the actual size. This can allow remote attackers to cause a...

MGASA-2018-0231 Updated afflib packages fix security vulnerability

A flaw was found in AFFLIB aka AFFLIBv3 through 3.7.16. The afgetpage function in lib/afflibpages.cpp allows remote attackers to cause a denial of service segmentation fault via a corrupt AFF image that triggers an unexpected pagesize value CVE-2018-8050...

Updated afflib packages fix security vulnerability

A flaw was found in AFFLIB aka AFFLIBv3 through 3.7.16. The afgetpage function in lib/afflibpages.cpp allows remote attackers to cause a denial of service segmentation fault via a corrupt AFF image that triggers an unexpected pagesize value CVE-2018-8050...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

ALPINE-CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

DEBIAN-CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

CVE-2018-1000168 affects nghttp2 versions 1.10.0 through 1.31.0, where an improper input validation in ALTSVC frame handling can cause a segmentation fault and denial of service. The vulnerability is exploitable via network clients. Public advisories confirm the issue is fixed in nghttp2 >= 1....

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

CVE-2018-1000168: Improper Input Validation

nghttp2 version = 1.10.0 and nghttp2 = 1.31.1...

Code injection

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The vulnerability CVE-2018-10776 affects mp3gain (mpglibDBL/common.c, getbits) up to version 1.5.2-r2. The getbits function is exposed to remote inputs and can cause a denial of service via segmentation fault and application crash, with possible unspecified additional impact. Documents identify t...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

CVE-2018-10776

The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact...

mp3gain Denial of Service Vulnerability

mp3gain is a volume adjustment application for MP3 files. A security vulnerability exists in the 'getbits' function in the mpglibDBL/common.c file in mp3gain 1.5.2-r2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error and...

PT-2018-10102

Name of the Vulnerable Software and Affected Versions mp3gain versions prior to 1.5.2-r2 Description The issue concerns the getbits function in mpglibDBL/common.c, which allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, or possibly have...