1764 matches found
Debian DLA-475-1 : python-tornado security update
It was discovered that python-tornado, a Python web framework and asynchronous networking library, was susceptible for the BREACH attack. The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable. For Debian 7...
The vulnerability of the libarchive library, allowing a hacker to execute arbitrary code
The vulnerability of the libarchive library exists due to the incorrect definition of the compressed file size in the .zip format archive. Exploiting this vulnerability allows a malicious actor to insert arbitrary code into the file header, which will be executed with the privileges of the curren...
gd: arbitrary code execution
A heap-based buffer overflow caused by an integer signedness error has been found in the libgd code handling compressed gd2 chunks...
The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure
The vulnerability of the putcontig8bitCIELab function in the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory overflow during reading by using a compressed TIFF image...
Updated libgd packages fix CVE-2016-3074
Updated libgd packages fix security vulnerability: A signedness vulnerability exists in libgd 2.1.1 and earlier which may result in a heap overflow when processing compressed gd2 data CVE-2016-3074...
CVE-2016-3074
Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...
DEBIAN-CVE-2016-3074
Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...
CVE-2016-3074
Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...
CVE-2016-3074
Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...
libgd gd2 Data Denial of Service Vulnerability
libgd is an open source library for dynamically creating images, which supports the creation of charts, graphs, thumbnails and more. A security vulnerability exists in libgd that allows remote attackers to conduct denial-of-service attacks on applications that can utilize compressed gd2 data...
Google Chrome ProcessCommandsInternal Function Denial of Service Vulnerability
Google Chrome is a web browsing tool developed by Google. A denial of service vulnerability exists in the function ProcessCommandsInternal in dec/decode.c within Brotli in versions of Google Chrome prior to 48.0.2564.109, which can cause a denial of service by a remote attacker with data compress...
USN-2888-1: Linux kernel (Utopic HWE) vulnerabilities
It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...
Ubuntu 12.04 LTS : linux vulnerabilities (USN-2886-1)
It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...
CVE-2015-8781
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds write via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782...
Out-of-bounds
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds write via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782...
CVE-2015-8781
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds write via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782...
CVE-2015-8781
CVE-2015-8781 affects libtiff: tif_luv.c can trigger a denial of service via an out-of-bounds write when processing a LogL compressed TIFF image with an invalid number of samples per pixel. This is one of multiple libtiff flaws reported around 2015–2016. Connected sources document the issue and i...
CVE-2015-8781
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds write via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782...
