11028 matches found
Information disclosure
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
DEBIAN-CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
CVE-2017-15928
Ox gem for Ruby (version 2.8.0) is affected by CVE-2017-15928: parsing crafted input with parse_obj can crash the process with a segmentation fault. The NVD entry provides CVSS vectors (2.0/3.0) and a base score of 5.0 (CVSS2) / 7.5 (CVSS3), indicating a high severity under CVSS3 but partial impa...
CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
CVE-2017-15928
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
PT-2017-14288
Name of the Vulnerable Software and Affected Versions Ox gem version 2.8.0 Description The Ox gem for Ruby crashes with a segmentation fault when a crafted input is supplied to the parse obj function. The vendor has stated that Ox should handle the error more gracefully but has not confirmed a...
CVE-2017-15938: Improper Restriction of Operations within the Bounds of a Memory Buffer
dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, miscalculates DWFORMrefaddr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service findabstractinstancename invalid memory read, segmentation...
CVE-2017-15928: Improper Input Validation
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
ox ruby gem segmentation fault via parse_obj
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...
openSUSE Security Update : exiv2 (openSUSE-2017-1180)
This update for exiv2 fixes the following issues : Security issues fixed : - CVE-2017-11591: There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input. boo1050257 - CVE-2017-11683: There is a reachable...
Design/Logic Flaw
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...
CVE-2011-5320
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...
CVE-2011-5320
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...
CVE-2011-5320
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...
CVE-2011-5320
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...
CVE-2011-5320
CVE-2011-5320 affects the GNU C Library (glibc) where scanf and related input functions are vulnerable in versions prior to 2.15. A crafted large string of 0s can trigger a local denial of service (segmentation fault). The impact is limited to local attackers with access to the system and is not ...