3757 matches found
PT-2017-12603
Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility APR-util versions 1.6.0 and prior Description The issue is related to the failure to validate the integrity of SDBM database files used by apr sdbm functions, which can result in a possible out of bound read...
Open vSwitch Denial of Service Vulnerability (CNVD-2017-32356)
Open vSwitch OvS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license that supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. A security vulnerability exists in the...
PJSIP Teluu pjproject pjlib and pjlib-util Buffer Overflow Vulnerability
PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...
PJSIP Teluu pjproject pjlib and pjlib-util Integer Overflow Vulnerability
PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
Oracle Java SE Security Update (cpuoct2017 - 03) - Linux
Oracle Java SE is prone to an unspecified vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Oracle Java SE Security Update (cpuoct2017 - 03) - Windows
Oracle Java SE is prone to an unspecified vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
LAME Heap Buffer Overflow Vulnerability
LAME is LAME team developed a set of open source MP3 audio compression software . A buffer overflow vulnerability exists in the 'fillbuffer' function of the libmp3lame/util.c file in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service heap buffer...
DEBIAN-CVE-2017-14970
In lib/ofp-util.c in Open vSwitch OvS before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more...
Alienvault OSSIM av-centerd Util.pm sync_rserver Command Execution
require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The vulnerability is triggered due to an incomplete blacklist...
CVE-2017-12900
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
CVE-2017-12900
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
CVE-2017-12900
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
CVE-2017-13011
tcpdump CVE-2017-13011 is a vulnerability in bittok2str_internal() that can cause a buffer overflow in multiple protocol parsers. The issue affects tcpdump releases prior to 4.9.2, and has been addressed by upgrading to tcpdump 4.9.2 (as reflected in Debian DSA-3971-1/DSA-3971-1, IBM AIX advisori...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
Tcpdump buffer overflow vulnerability (CNVD-2017-27596)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the 'tok2strbuf' functio...
CVE-2017-12900: Out-of-bounds Read
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
CVE-2017-13011: Improper Restriction of Operations within the Bounds of a Memory Buffer
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
