Debian: Security Advisory (DSA-3917-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

DEBIAN-CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

Heap overflow

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110

CVE-2017-11110 affects catdoc 0.95, with a heap-based buffer underflow in ole_init (ole.c) that can be triggered by a crafted file, potentially allowing remote denial of service or other impact. Public advisories from Mageia, Debian, openSUSE, and others confirm the issue and provide patches; exa...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

CVE-2017-11110: Out-of-bounds Write

The oleinit function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service heap-based buffer underflow and application crash or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer...

PT-2017-11746

Name of the Vulnerable Software and Affected Versions catdoc version 0.95 Description The issue allows remote attackers to cause a denial of service, which may lead to a heap-based buffer underflow and application crash, or possibly have other unspecified impacts. This is achieved through a craft...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

Stack overflow

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

UBUNTU-CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...

CVE-2017-9949

The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service stack-based buffer underflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GN...