CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

AIX bind Advisory : bind_advisory14.asc (IV91214) (IV91253) (IV91254) (IV91255) (IV91256) (IV91257)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists when handling malformed options sections. An unauthenticated, remote attacker can exploit this, via a specially crafted OPT resource record, to cause an...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

Code injection

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

CVE-2017-11692

yaml-cpp vulnerability (CVE-2017-11692) affects version 0.5.3 and earlier. The issue is in Token& Scanner::peek in scanner.cpp, where processing a crafted string like '!2' can trigger a remote denial of service via an assertion failure and application exit. Multiple connected advisories corrobora...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

DEBIAN-CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11683

The CVE-2017-11683 entry concerns Exiv2 0.26 with a reachable assertion in Internal::TiffReader::visitDirectory (tiffvisitor.cpp) that can enable a remote denial of service via crafted input. Connected sources confirm this is a real issue affecting Exiv2’s TIFF/metadata parsing path, not a local ...

CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

Fedora 26 : krb5 (2017-e5b36383f4)

Fix CVE-2017-11368 remote triggerable assertion failure in krb5kdc Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

PT-2017-4086 · Exiv2 +4 · Exiv2 +4

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp. This can lead to a remote denial of service attack via crafted input. The vulnerability is...

openSUSE Security Update : jasper (openSUSE-2017-844)

This update for jasper fixes the following issues : Security issues fixed : - CVE-2016-9262: Multiple integer overflows in the jasrealloc function in base/jasmalloc.c and memresize function in base/jasstream.c allow remote attackers to cause a denial of service via a crafted image, which triggers...

PT-2017-3734 · Qemu +1 · Qemu +2

Name of the Vulnerable Software and Affected Versions: Qemu versions prior to 2.10.1 Qemu-NBD affected versions not specified Description: The issue is related to errors during connection establishment in the Qemu-NBD hardware emulator server. It can be exploited by a remote attacker to cause a...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1122)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The regulatorenagpiofree function in drivers/regulator/core.c in the Linux kernel allows local users to gain privileges or cause a denial of...

graphite2: assertion error "size() > n"

An assertion error has been reported in graphite2. An attacker could possibly exploit this flaw to cause an application crash...