DEBIAN-CVE-2017-9524

The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attackers to cause a denial of service segmentation fault and server crash by leveraging failure to ensure that all initialization occurs before talking to a client in the...

CVE-2017-9524

CVE-2017-9524 affects the qemu-nbd server in QEMU when built with NBD Server support. The advisory notes a remote-denial-of-service risk caused by a failure to ensure full initialization before negotiating with the client in nbd_negotiate, allowing a remote attacker to trigger a segmentation faul...

LibTIFF - '_TIFFVGetField (tiffsplit)' Out-of-Bounds Read

Source: http://bugzilla.maptools.org/showbug.cgi?id=2693 On 4.0.7: tiffsplit $FILE ==2007== Invalid read of size 4 ==2007== at 0x40CD1A: TIFFVGetField tifdir.c:1072 ==2007== by 0x41B2C5: TIFFVGetField tifdir.c:1198 ==2007== by 0x41B2C5: TIFFGetField tifdir.c:1182 ==2007== by 0x404CCF: tiffcp...

libdwarf '_dwarf_decode_s_leb128_chk' function remote denial of service vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfdecodesleb128chk' function of the dwarfleb.c file in libdwarf. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of service...

CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

Design/Logic Flaw

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

UBUNTU-CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

DEBIAN-CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

CVE-2017-9998

CVE-2017-9998 concerns the libdwarf project. The vulnerability arises in the function _dwarf_decode_s_leb128_chk in dwarf_leb.c, with libdwarf versions affected up to 2017-06-28, allowing remote attackers to cause a denial of service (Segmentation fault) via a crafted file. Impact is a crash/DoS ...

CVE-2017-9998

The dwarfdecodesleb128chk function in dwarfleb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service Segmentation fault via a crafted file...

exiv2 'Image::printIFDStructure' Denial of Service Vulnerability

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata, providing fast and easy reading and writing of image metadata in a wide range of EXIF, IPTC and XMP formats. The Image::printIFDStructure security vulnerability in Exiv2 version 0.26. A remote attacker ca...

PYSEC-2017-142

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

Design/Logic Flaw

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

CVE-2017-9953 affects Exiv2 (libexiv2). The issue is an invalid free in Image::printIFDStructure, causing a segmentation fault and a remote denial of service with crafted input in Exiv2 0.26. PTSecurity literature indicates fixes in Exiv2 0.27.2 and later; upgrade to 0.27.2+ (or later) to remedia...

Apache HTTP Server Denial-Of-Service Vulnerability (Jun 2017) - Linux

Apache HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache httpd denial of service vulnerability (CNVD-2017-11803)

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in the HTTP strict parsing changes added to Apache httpd versions 2.2.32 and 2.4.24. An attacker could exploit...