Lucene search
+L

6175 matches found

Positive Technologies
Positive Technologies
added 2017/09/10 12:0 a.m.3 views

PT-2017-12894

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RPKI-Router parser, specifically in the rpki rtr pdu print function within the print-rpki-rtr.c file. This problem can lead to potential data exposur...

9.8CVSS7AI score0.19028EPSS
SaveExploits9References422
Positive Technologies
Positive Technologies
added 2017/09/10 12:0 a.m.14 views

PT-2017-12883

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the MPTCP parser, specifically in the print-mptcp.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to version 4.9...

9.8CVSS7AI score0.19028EPSS
SaveExploits9References422
Positive Technologies
Positive Technologies
added 2017/09/10 12:0 a.m.13 views

PT-2017-12899

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically in the isis print is reach subtlv function within print-isoclns.c. Recommendations For versions prior to 4.9.2, update...

9.8CVSS7AI score0.19028EPSS
SaveExploits9References543
Positive Technologies
Positive Technologies
added 2017/09/10 12:0 a.m.4 views

PT-2017-13016

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue is related to a buffer over-read in the Cisco HDLC parser. There is no information provided about the estimated number of potentially affected...

9.8CVSS6.9AI score0.19028EPSS
SaveExploits9References544
Positive Technologies
Positive Technologies
added 2017/09/10 12:0 a.m.12 views

PT-2017-12869

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp mgmt addr tlv print function within print-lldp.c. Recommendations For versions prior to 4.9.2, update to versio...

9.8CVSS8.8AI score0.19028EPSS
SaveExploits9References543
Positive Technologies
Positive Technologies
added 2017/09/09 12:0 a.m.6 views

PT-2017-13307 · Mongodb +2 · Libbson +3

Name of the Vulnerable Software and Affected Versions: MongoDB libbson version 1.7.0 Description: The issue arises from a miscalculation in the bson iter codewscope function, which leads to a denial of service due to a heap-based buffer over-read in the bson utf8 validate function. This can be...

8.4CVSS6.3AI score0.02797EPSS
SaveExploits0References31
BDU FSTEC
BDU FSTEC
added 2017/09/08 12:0 a.m.9 views

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a file archiver for the UnRAR archive format, allows a malicious actor to cause the application to terminate abnormally.

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a tool for decompressing UnRAR files, arises from operations that go beyond the boundaries of memory buffers reading from locations outside of memory space. Exploiting this vulnerability can allow an attacker to cause t...

7.5CVSS6.9AI score0.02197EPSS
SaveExploits1References4Affected Software2
RedHat Linux
RedHat Linux
added 2017/09/06 5:49 p.m.5 views

openvswitch: Buffer over-read while parsing the group mod OpenFlow message

A buffer over-read issue was found in Open vSwitch OvS which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack...

9.8CVSS5.9AI score0.02809EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/09/06 5:49 p.m.9 views

openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...

9.8CVSS6AI score0.02887EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/09/06 4:53 p.m.7 views

openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...

9.8CVSS6AI score0.02887EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/09/06 4:53 p.m.6 views

openvswitch: Buffer over-read while parsing the group mod OpenFlow message

A buffer over-read issue was found in Open vSwitch OvS which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack...

9.8CVSS5.9AI score0.02809EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/09/06 4:53 p.m.10 views

openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets

A buffer over-read was found in the Open vSwitch OvS firewall implementation. This flaw can be triggered by parsing a specially crafted TCP, UDP, or IPv6 packet. A remote attack could use this flaw to cause a Denial of Service DoS...

9.8CVSS5.9AI score0.02415EPSS
SaveExploits0References4
OSV
OSV
added 2017/09/04 8:29 p.m.2 views

DEBIAN-CVE-2017-14130

The bfdelfparseattributes function in elf-attrs.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service bfdelfattrstrdup heap-based buffer over-read and application crash via a crafted ELF file...

5.5CVSS6.4AI score0.01555EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.11 views

The vulnerability in the task management of the 1x Android operating system from the CAF repository allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability in the task management of the 1x Android operating system arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility...

10CVSS8AI score0.01184EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2017/08/30 1:59 p.m.7 views

openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...

9.8CVSS6AI score0.02887EPSS
SaveExploits0References4
OSV
OSV
added 2017/08/30 9:29 a.m.4 views

DEBIAN-CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS7.8AI score0.02787EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/30 9:29 a.m.6 views

DEBIAN-CVE-2017-13769

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service buffer over-read by sending a crafted JPEG file...

6.5CVSS5.9AI score0.01398EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/30 9:29 a.m.2 views

UBUNTU-CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS7.3AI score0.02787EPSS
SaveExploits0References5
OSV
OSV
added 2017/08/30 9:29 a.m.3 views

ALPINE-CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS7AI score0.02787EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/30 12:0 a.m.5 views

UBUNTU-CVE-2017-13769

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service buffer over-read by sending a crafted JPEG file...

6.5CVSS6.7AI score0.01398EPSS
SaveExploits0References3
Rows per page
Query Builder