12243 matches found
Stack overflow
A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...
CVE-2018-18407
A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...
CVE-2018-18409
A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...
CVE-2018-18407
CVE-2018-18407 affects Tcpreplay 4.3.0 beta1, where a heap-based over-read in tcpreplay-edit (csum_replace4() in incremental_checksum.h) can trigger a denial of service. The vulnerability concerns the incremental checksum path and does not affect confidentiality/integrity; availability is partial...
CVE-2018-18409
A stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram call...
CVE-2018-18407
A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...
CVE-2018-18409
CVE-2018-18409 affects tcpflow 1.5.0 (IPTRee.h setbit) with a stack-based buffer over-read, causing denial of service during address_histogram/get_histogram. Public docs confirm the vulnerability and that tcpflow 1.5.2 fixes it (updates referenced by Mageia/Fedora advisories). No exploitation det...
Fedora 27 : clamav (2018-1fc39f2d13)
ClamAV 0.100.2 has been released! This is a patch release to address several vulnerabilities. Fixes for the following ClamAV vulnerabilities: CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial-of-service DoS...
CVE-2018-18196
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...
CVE-2018-18194
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...
Heap overflow
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...
CVE-2018-18196
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...
CVE-2018-18194
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...
Heap overflow
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...
UBUNTU-CVE-2018-18196
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...
CVE-2018-18194
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...
CVE-2018-18196
An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...
CVE-2018-18196
CVE-2018-18196 affects libgig 4.1.0, with a heap-based buffer over-read in RIFF::List::GetListTypeString (RIFF.cpp). The issue is consistently described across multiple connected sources (Red Hat, SUSE, OSV, Debian/Ubuntu variants, NVD). CVSSv3 base score is 8.8 (Network, low attack complexity, p...
CVE-2018-18194
CVE-2018-18194 affects libgig 4.1.0, with a heap-based buffer over-read in DLS::Region::GetSample() implemented in DLS.cpp. The issue, reported across Red Hat, SUSE, OSV, NVD and other feeds, does not include publicly documented exploit details in the provided sources. CVSS metrics in the record ...