Design/Logic Flaw

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument. Remediation There is no fixed version fo...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c is vulnerable to causing a denial of service (Segmentation Fault) when presented with an invalid ISALNUM argument. This is the concrete technical detail across connected documents: affected software is tidy-html5/tidy (Tidy) version 5.5.31; t...

CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service Segmentation Fault, as demonstrated by an invalid ISALNUM argument...

BSA-2017-364

Security Advisory ID : BSA-2017-364 Component : Apache HTTPD Revision : 2.0: Final The HTTP strict parsing changes added in Apachehttpd2.2.32 and 2.4.24 introduced a bug in token list parsing, which allowsapfindtokento search past the end of its input string. By maliciously crafting a sequence of...

MGASA-2017-0298 Updated apache packages fix security vulnerabilities

In Apache httpd before 2.4.27, the value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by modauthdigest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized poo...

CVE-2017-12966

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

CVE-2017-12966

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

Code injection

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

CVE-2017-12966

CVE-2017-12966 affects ASN.1 compiler ASN1C (version 0.9.28) and its libasn1fix.a, with the flaw located in the asn1f_lookup_symbol_impl function in asn1fix_retrieve.c. A remote attacker can trigger a denial of service (segmentation fault) by providing a specially crafted .asn1 file. The vulnerab...

Code injection

The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service segmentation fault and process crash and execute arbitrary code via a crafted JPG...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2017-1157)

According to the version of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attackers to cause a...

glibc: Segmentation fault caused by passing out-of-range data to strftime()

It was found that out-of-range time values passed to the strftime function could result in an out-of-bounds memory access. This could lead to application crash or, potentially, information disclosure...

DivFix++ 0.34 - Denial of Service

DivFix++ denial of service vulnerability ================ Author : qflb.wu =============== Introduction: ============= DivFix++ is FREE AVI Video Fix & Preview program. Affected version: ===== v0.34 Vulnerability Description: ========================== the DivFixppCore::aviheaderfix function in...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply...

UBUNTU-CVE-2017-11665

The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...