Heap overflow

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

Stack overflow

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

Design/Logic Flaw

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19843

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19843

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19842

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19843

opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19842

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

CVE-2018-19843

CVE-2018-19843 affects radare2: opmov in libr/asm/p/asm_x86_nz.c vulnerable to a buffer over-read resulting in a DoS when fed crafted x86 assembly data. Impact described as Denial of Service; exploitation demonstrated by rasm2. The vulnerability applies to radare2 builds before 3.1.0. No remediat...

CVE-2018-19842

CVE-2018-19842 affects radare2, specifically the function getToken in the file libr/asm/p/asm_x86_nz.c . The issue is a stack-based buffer over-read triggered by crafted x86 assembly data, leading to a potential denial of service . Connected sources confirm the vulnerability exists in radare2 bef...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

CVE-2018-19839 affects LibSass prior to 3.5.5. The vulnerability is a heap-based buffer over-read in Sass::handle_error (sass_context.cpp) that attackers can trigger via a crafted Sass file, causing a denial-of-service. Public details in the initial document confirm the exact function and file, t...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19842

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...

CVE-2018-19519

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

Heap-based Buffer Over-read

libsndfile.so is vulnerable to heap-based buffer over-read. The vulnerability exists because wavwriteheader in wav.c does not properly handle heap memory allocation, allowing a over-read on address 0x61200000be50...