GNU Binutils Denial of Service Vulnerability (CNVD-2017-30073)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in decodelineinfo in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils, which can be...

librawspeed: Use-after-poison in void rawspeed::LJpegDecompressor::decodeN<2>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6010819949101056 Project: librawspeed Fuzzer: afllibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

CVE-2017-14734

The buildmsps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to hevcdecodeinit1...

PT-2017-13659

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue allows remote attackers to cause a denial of service, which can result in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This is achieved through a...

PT-2017-4297

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service by...

ImageMagick Denial of Service Vulnerability (CNVD-2017-31147)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'sixeldecode' function in the coders/sixel.c file in ImageMagick versi...

PT-2017-4308

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the decode line info function in the dwarf2.c component of the Binary File Descriptor BFD library, also known as libbfd. It allows remote attackers to cause a denial of service,...

DEBIAN-CVE-2017-14626

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...

UBUNTU-CVE-2017-14626

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...

FreeBSD : ruby -- multiple vulnerabilities (95b01379-9d52-11e7-a25c-471bafc3262f)

Ruby blog : CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf If a malicious format string which contains a precious specifier is passed and a huge minus value is also passed to the specifier, buffer underrun may be caused. In such situation, the result may contains heap, or the Ruby...

ALPINE-CVE-2017-14033

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service interpreter crash via a crafted string...

CVE-2017-14033

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service interpreter crash via a crafted string...

PT-2017-13275

Name of the Vulnerable Software and Affected Versions Kaltura versions prior to 13.2.0 Description The issue concerns the wiki decode Developer System Helper function in the admin panel, which allows remote attackers to conduct PHP object injection attacks. This enables the execution of arbitrary...

CVE-2017-14033: Improper Restriction of Operations within the Bounds of a Memory Buffer

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service interpreter crash via a crafted string...

PT-2017-13213

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.2.8 Ruby versions 2.3.x prior to 2.3.5 Ruby versions 2.4.x through 2.4.1 Description The issue allows attackers to cause a denial of service, resulting in an interpreter crash, via a crafted string. This is due to a...

DEBIAN-CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

UBUNTU-CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

UBUNTU-CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

PT-2017-12886

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode multicast vpn function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9....