Lucene search
+L

283 matches found

CVE
CVE
added 2018/05/29 8:00 p.m.67 views

CVE-2016-10590

CVE-2016-10590 affects the Node.js wrapper cue-sdk-node, which downloads zipped resources over HTTP. The underlying issue is insecure HTTP transfers that enable a MITM attacker to swap the requested zip with a malicious one, potentially enabling remote code execution on the host. The public advis...

9.3CVSS8.3AI score0.01752EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/29 8:00 p.m.46 views

CVE-2016-10590

cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested zip file with an attacker controlled zip file if the attacker i...

8.3AI score0.01752EPSS
SaveExploits0References1
Fedora
Fedora
added 2018/04/06 3:03 p.m.48 views

[SECURITY] Fedora 27 Update: bchunk-1.2.2-1.fc27

The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...

5.5CVSS2.5AI score0.01EPSS
SaveExploits0
Fedora
Fedora
added 2018/04/06 2:38 p.m.41 views

[SECURITY] Fedora 26 Update: bchunk-1.2.2-1.fc26

The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...

5.5CVSS2.5AI score0.01EPSS
SaveExploits0
Fedora
Fedora
added 2018/04/06 11:10 a.m.41 views

[SECURITY] Fedora 28 Update: bchunk-1.2.2-1.fc28

The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...

5.5CVSS2.5AI score0.01EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/12/21 12:00 a.m.17 views

The vulnerability in the software for converting images on the Debian GNU/Linux operating system arises from overflowing buffers in dynamic memory, allowing an attacker to cause the application to terminate abnormally.

The vulnerability of the software for converting image formats in the Debian GNU/Linux operating system is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause the application to terminate abnormally by using a specially crafted cu...

5.5CVSS5.7AI score0.01EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/12/21 12:00 a.m.17 views

The vulnerability in the software for converting images on the Debian GNU/Linux operating system, related to pointer arithmetic errors, allows a hacker to cause an unexpected termination of the application.

The vulnerability of the software for converting image formats in the Debian GNU/Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, working remotely, to cause the application to terminate abnormally using a specially crafted cue fi...

5.5CVSS5.5AI score0.00909EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/12/21 12:00 a.m.12 views

The vulnerability in the software for converting images on the Debian GNU/Linux operating system arises from overflowing buffers in dynamic memory, allowing an attacker to cause the application to terminate abnormally.

The vulnerability of the software for converting image formats in the Debian GNU/Linux operating system is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause the application to terminate abnormally by using a specially crafted cu...

5.5CVSS5.7AI score0.01EPSS
SaveExploits0References5Affected Software2
Mageia
Mageia
added 2017/11/26 9:18 p.m.47 views

Updated bchunk package fixes security vulnerabilities

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file. CVE-2017-15953 bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when...

5.5CVSS3AI score0.01EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/26 9:18 p.m.19 views

MGASA-2017-0426 Updated bchunk package fixes security vulnerabilities

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file. CVE-2017-15953 bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when...

5.5CVSS5.5AI score0.01EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/11/03 12:00 a.m.15 views

bchunk heap buffer overflow vulnerability

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A heap buffer overflow vulnerability exists in bchunk versions 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with malformed CUE .cue files...

5.5CVSS5.5AI score0.01EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/03 12:00 a.m.11 views

bchunk denial of service vulnerability

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A security vulnerability exists in bchunk version 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with malformed CUE .cue files...

5.5CVSS5.2AI score0.00909EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/11/03 12:00 a.m.25 views

Debian DLA-1158-1 : bchunk security update

Several vulnerabilities were discovered in bchunk, a tool to convert a CD image in .bin/.cue format into a set of .iso and .cdr/.wav tracks. It was possible to trigger a heap-based buffer overflow with an resultant invalid free when processing a malformed CUE .cue file that may lead to the...

5.5CVSS6.4AI score0.01EPSS
SaveExploits0References5
CNVD
CNVD
added 2017/11/03 12:00 a.m.11 views

bchunk heap buffer overflow vulnerability (CNVD-2017-33102)

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A heap buffer overflow vulnerability exists in bchunk versions 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with a malformed CUE .cue file...

5.5CVSS5.5AI score0.01EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/28 9:29 p.m.14 views

Heap overflow

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

4.3CVSS5.5AI score0.01EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2017/10/28 9:29 p.m.8 views

UBUNTU-CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

5.5CVSS6.1AI score0.01EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/28 9:29 p.m.18 views

UBUNTU-CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

5.5CVSS6.2AI score0.01EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/28 9:29 p.m.20 views

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

5.5CVSS5.6AI score
SaveExploits0References4
OSV
OSV
added 2017/10/28 9:29 p.m.12 views

UBUNTU-CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

5.5CVSS6AI score0.00909EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/28 9:29 p.m.9 views

DEBIAN-CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

5.5CVSS6.9AI score0.00909EPSS
SaveExploits0References1
Rows per page
Query Builder