GHSA-PJJ4-W39G-PW54 Ox gem crashes due to a crafted input

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

PT-2018-5762 · Netapp +7 · Netapp Oncommand Shift +26

Name of the Vulnerable Software and Affected Versions: jackson-databind versions prior to 2.8.11 and 2.9.4 debian linux affected versions not specified fasterxml jackson-databind affected versions not specified netapp oncommand balance affected versions not specified netapp oncommand performance...

USN-3276-3: shadow vulnerability

USN-3276-1 and USN-3276-2 fixed vulnerabilities in shadow. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Sebastian Krahmer discovered integer overflows in shadow utilities. A local attacker could possibly cause them to crash or potentially gain...

The vulnerability of the FortiOS operating system arises from insufficient input data validation, allowing attackers to trigger a service failure.

The vulnerability of the FortiOS operating system exists due to the lack of input validation. Exploiting this vulnerability allows a malicious actor to cause a failure in the FortiOS web interface by entering a specially crafted string into the “params” field for URL addresses: /json...

openSUSE Security Update : libsass (openSUSE-2017-1250)

This update for libsass fixes the following DoS vulnerabilities : - CVE-2017-11554: Stack consumption vulnerability allowed remote DoS via crafted input 1050148 - CVE-2017-11555: Illegal address access in Eval::operator allowed remote DoS via crafted input boo1050149 - CVE-2017-11556: Stack...

Ruby Ox gem denial of service vulnerability

Ruby Ox gem is a Ruby-based XML parser . A denial of service vulnerability exists in Ruby Ox gem version 2.8.0. An attacker can exploit this vulnerability to cause a denial of service process crash and segmentation error with specially crafted input...

Information disclosure

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

CVE-2017-15928

In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication...

Sound eXchange Denial of Service Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'soxappendcomment' function of the forms.c file in SoX version 14.4.2. An attacker can exploit this...

Sound eXchange Buffer Overflow Vulnerability (CNVD-2017-34599)

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A stack buffer overflow vulnerability exists in the 'lsxmsadpcmblockexpandi' function of the adpcm.c file in SoX version 14.4.2. An attacker can...

UBUNTU-CVE-2017-15568

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/applicationhelper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history...

AZL-44898 CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33

There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

DEBIAN-CVE-2017-15371

There is a reachable assertion abort in the function soxappendcomment in formats.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

DEBIAN-CVE-2017-15370

There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

DEBIAN-CVE-2017-15021

bfdgetdebuglinkinfo1 in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to bfdgetl32...

DEBIAN-CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...

PYSEC-2017-134

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PYSEC-2017-131

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...