Design/Logic Flaw

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...

PYSEC-2017-122

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

PYSEC-2017-122

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11338

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

Xxe

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...

PYSEC-2017-119

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

PYSEC-2017-121

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

Exiv2 'Action::TaskFactory::cleanup' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Action::TaskFactory::cleanup' function of the actions.cpp file in Exiv2 version 0.26. A remote attacker can exploit this vulnerability to cause a denial of service...

LibSass 'lexer.hpp' heap buffer over-read vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the lexer.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

LibSass ast.cpp File Remote Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the ast.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

Exiv2 'Exiv2::Image::printIFDStructure' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Exiv2::Image::printIFDStructure' function of the image.cpp file in Exiv2 version 0.26. A remote attacker can cause a denial of service infinite loop by exploiting th...

Exiv2 'XmpParser::terminate()' Denial of Service Vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'XmpParser::terminate' function in Exiv2 version 0.26. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error with the help ...

CVE-2017-11340

CVE-2017-11340 affects Exiv2 0.26 where the Segmentation fault occurs in XmpParser::terminate() due to an exit-related issue. A crafted input can trigger a remote denial of service. Public details in the provided documents confirm the vulnerability surface in Exiv2 0.26; other connected items ind...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

PT-2017-11944 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.12.1 Description: The issue is related to an incomplete fix for a previous problem, which allows an algorithmic complexity attack. An attacker can provide crafted input that, when inserted into the symbol...

CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...