CVE-2019-9705

CVE-2019-9705 affects Vixie Cron prior to Debian 3.0pl1-133, allowing local users to cause memory DoS by submitting an unlimited number of crontab lines. Connected sources confirm the issue is a local denial of service due to memory consumption from large crontabs. The Broadcom advisory re-states...

Vixie cron denial of service vulnerability

Vixie cron is a full-featured cron implementation based on SysV cron. cron is a daemon that runs scheduled tasks based on input from the command crontab. A denial of service vulnerability exists in previous versions of the Vixie Cron 3.0pl1-133 Debian package. The vulnerability stems from not...

CVE-2019-9706

CVE-2019-9706 affects Vixie Cron (Debian package cron) prior to the patched release 3.0pl1-133, where a force_rescan_user use-after-free can crash the daemon, enabling local denial of service. Public disclosures in Ubuntu/Debian advisories (USN USN-5259-2/3) and related OSSV/OpenVAS entries confi...

Vixie cron denial of service vulnerability (CNVD-2019-13244)

Vixie cron is a full-featured cron implementation based on SysV cron. cron is a daemon that runs scheduled tasks based on input from the command crontab. A denial of service vulnerability exists in previous versions of the Vixie Cron 3.0pl1-133 Debian package. The vulnerability stems from accepti...

CVE-2019-9706

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service use-after-free and daemon crash because of a forcerescanuser error...

DEBIAN-CVE-2019-8398

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5Tgetsize in H5T.c...

BOCHS 2.6-5 - Local Buffer Overflow

Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer module An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. Program...

USN-3310-1: lintian vulnerability

Jakub Wilk discovered that lintian incorrectly handled deserializing certain YAML files. If a user or automated system were tricked into running lintian on a specially crafted package, a remote attacker could possibly use this issue to execute arbitrary code...

Code injection

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

UBUNTU-CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0373

Config-Model (libconfig-model-perl) before 2.102 contains a dangerous "use lib" line in GenClassPod.pm that could let remote attackers influence the system via a crafted Debian package. This CVE-2017-0373 detail is consistently described across multiple feeds (NVD, CNVD, OSV, Ubuntu, Debian OSV, ...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

CVE-2017-0373

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

DEBIAN-CVE-2017-8349

In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file...

DEBIAN-CVE-2017-8355

In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service memory leak via a crafted file...

dpkg directory traversal vulnerability (CNVD-2017-06898)

dpkg is a suite management system developed specifically for Debian to facilitate the installation, update and removal of software. A directory traversal vulnerability exists in dpkg. dpkg's unpacking feature is vulnerable to a directory traversal vulnerability. A remote attacker can exploit this...

DEBIAN-CVE-2017-8283

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...