DEBIAN-CVE-2016-4356

The appendutf8value function in the DN decoder dn.c in Libksba before 1.3.3 allows remote attackers to cause a denial of service out-of-bounds read by clearing the high bit of the byte after invalid utf-8 encoded data...

Perl Denial of Service Vulnerability (CNVD-2016-03650)

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A denial of service vulnerability exists in the 'Sreghop3', 'Sreghop4', and 'Sreghopmaybe3' functions in the regexec.c file in Perl 5.23.9 and earlier versions. ' functions contain denial ...

DEBIAN-CVE-2015-8853

The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service infinite loop via crafted utf-8 data, as demonstrated by "a\x80."...

UBUNTU-CVE-2015-8853

The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service infinite loop via crafted utf-8 data, as demonstrated by "a\x80."...

UBUNTU-CVE-2016-4344

Integer overflow in the xmlutf8encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argument to the utf8encode function, leading to a heap-based buffer overflow...

Pivotal Software Cloud Foundry Diego Component Denial of Service Vulnerability

Pivotal Software Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, U.S. Diego is one of the components responsible for scheduling and running tasks and daemons. A denial of service vulnerability exists in the Diego component of Pivotal...

USN-2982-1 libksba vulnerabilities

Hanno Böck discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2016-4353 Hanno Böck discovered that Libksba...

UBUNTU-CVE-2016-4574

Off-by-one error in the appendutf8value function in the DN decoder dn.c in Libksba before 1.3.4 allows remote attackers to cause a denial of service out-of-bounds read via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356...

UBUNTU-CVE-2016-4483

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627...

Libksba 'decoder src/dn.c' integer overflow vulnerability

Libksba is a library that simplifies work tasks for X.509 certificates, CMS data and related objects in the GnuPG project developed by the GNU Project. An integer overflow vulnerability exists in Libksba's DN decoder src/dn.c file. An attacker can exploit this vulnerability to cause a denial of...

UBUNTU-CVE-2016-4356

The appendutf8value function in the DN decoder dn.c in Libksba before 1.3.3 allows remote attackers to cause a denial of service out-of-bounds read by clearing the high bit of the byte after invalid utf-8 encoded data...

PT-2016-5902 · Kde +2 · Libksba +2

Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by manipulating the high bit of the byte after invalid utf-8 encoded data in the append utf8 valu...

DEBIAN-CVE-2016-2216

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

UBUNTU-CVE-2016-2216

The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as...

libEBML Information Disclosure Vulnerability

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlUnicodeString::UpdateFromUTF8' function of libEBML allows an attacker to obtain sensitive information in process heap memory using specially crafted UTF-8 strings...

UBUNTU-CVE-2015-2058

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

ownCloud Server Arbitrary File Upload Vulnerability

ownCloud is an open source private cloud server. The ownCloud Server has a security vulnerability that allows authenticated users to bypass the file blacklist list and upload arbitrary files, such as .htaccess files, via UTF-8 encoded file paths...

GNU less 'is_utf8_well_formed()' remote buffer overflow vulnerability

GNU less is a More-like program in GNU, a free software engineering project. GNU less 'isutf8wellformed' remote buffer overflow vulnerability. Allows remote attackers to exploit this vulnerability to crash an application...

UBUNTU-CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10gen MongoDB Denial of Service Vulnerability

10gen MongoDB is a set of open source NoSQL database from the American company 10gen. A security vulnerability exists in 10gen MongoDB that allows remote attackers to submit BSON requests that specifically contain UTF-8 strings for denial of service attacks...