Lucene search
+L

2251 matches found

Prion
Prion
•added 2018/10/16 4:50 p.m.•29 views

Buffer overflow

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

4.3CVSS5.7AI score0.02586EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2018/10/16 4:50 p.m.•19 views

UBUNTU-CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS6.6AI score0.02586EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2018/10/16 3:00 p.m.•39 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS6.2AI score0.02586EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2018/10/16 3:00 p.m.•64 views

CVE-2018-18384

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

5.5CVSS5.4AI score0.02586EPSS
SaveExploits1
Prion
Prion
•added 2018/09/11 3:29 p.m.•25 views

Integer overflow

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

6.5CVSS9AI score0.02363EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2018/09/11 3:29 p.m.•31 views

CVE-2018-10893

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

8.8CVSS7.5AI score0.02363EPSS
SaveExploits0References2
OSV
OSV
•added 2018/09/11 3:29 p.m.•8 views

CVE-2018-10893

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

8.8CVSS9.1AI score
SaveExploits0References4
Mend
Mend
•added 2018/09/11 3:00 p.m.•2 views

CVE-2018-10893

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

8.8CVSS0.02363EPSS
SaveExploits0References6
CVE
CVE
•added 2018/09/11 3:00 p.m.•188 views

CVE-2018-10893

CVE-2018-10893 concerns spice-client’s handling of LZ compressed frames, with multiple integer/buffer overflow issues that could crash the client or allow arbitrary code execution. Public advisories reference fixes bundled in updated spice packages: Amazon Linux 2 ALAS-2023-2219 notes spice-proto...

8.8CVSS8.5AI score0.02363EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2018/09/11 3:00 p.m.•35 views

CVE-2018-10893

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

7.6CVSS8.6AI score0.02363EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/11 12:00 a.m.•5 views

CVE-2018-10893: Heap-based Buffer Overflow

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code...

8.8CVSS8.1AI score0.02363EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/08/28 7:19 p.m.•18 views

JDK: path traversal flaw in the Diagnostic Tooling Framework

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0 does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882...

7.4CVSS7.2AI score0.04513EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/08/27 2:20 p.m.•16 views

JDK: path traversal flaw in the Diagnostic Tooling Framework

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0 does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882...

7.4CVSS7.2AI score0.04513EPSS
SaveExploits0References4
CNVD
CNVD
•added 2018/08/22 12:00 a.m.•16 views

zutils zcat buffer overflow vulnerability

zutils is a package of zip file handling utilities. The program supports compression/decompression, compressed file comparison and compressed file integrity checking. zcat is one of the decompression utilities. A buffer overflow vulnerability exists in zcat in versions prior to zutils 1.8-pre2. A...

7.8CVSS7.9AI score0.01668EPSS
SaveExploits0References1
OSV
OSV
•added 2018/08/20 9:29 p.m.•15 views

CVE-2018-1656

The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java DTFJ IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0 does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882...

6.5CVSS5.4AI score0.04513EPSS
SaveExploits0References11
NVD
NVD
•added 2018/08/20 7:31 p.m.•34 views

CVE-2018-1000637

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...

7.8CVSS7.9AI score0.01668EPSS
SaveExploits0References3
OSV
OSV
•added 2018/08/20 7:31 p.m.•17 views

CVE-2018-1000637

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...

7.8CVSS7.9AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/08/20 7:31 p.m.•28 views

CVE-2018-1000637

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...

7.8CVSS7AI score0.01668EPSS
SaveExploits0References4
Prion
Prion
•added 2018/08/20 7:31 p.m.•25 views

Buffer overflow

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...

6.8CVSS7.8AI score0.01668EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2018/08/20 7:00 p.m.•41 views

CVE-2018-1000637

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fix...

7.8AI score0.01668EPSS
SaveExploits0References3
Rows per page
Query Builder