4484 matches found
PT-2017-12897
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode rt routing info function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version...
Denial of Service Vulnerability in Video Pioneer
Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supports HTTP, MMS and other streaming protocols, and smoothly plays WMV/asf/MP3/WMA/SWf and other audio and video formats. A denial of service vulnerability exists in AV Pioneer, where an...
Libidn2 'decode_digit' function integer overflow vulnerability
Libidn2 is a package that implements string preprocessing, Punycode, and IDNA specification definitions through the IETF International Domain Name IDN. An integer overflow vulnerability exists in the 'decodedigit' function of the punydecode.c file in Libidn2 versions prior to 2.0.4. A remote...
The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, allows a malicious actor to cause an unexpected termination of the application.
The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, arises due to the execution of an operation beyond the buffer boundaries in memory reading beyond the memory boundaries when calling EncodeFileName::Decode. Exploiting this...
Ruby URI.decode_www_form_component Method Denial of Service Vulnerability
Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security vulnerability exists in the URI.decodewwwformcomponent method in Ruby versions prior to 1.9.2-p330. A remote attacker can exploit this...
CVE-2017-14128
The decodelineinfo function in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service read1byte heap-based buffer over-read and application crash via a crafted ELF file...
GNU Binutils Denial of Service Vulnerability (CNVD-2017-25454)
GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...
DEBIAN-CVE-2017-14128
The decodelineinfo function in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service read1byte heap-based buffer over-read and application crash via a crafted ELF file...
unrar null pointer dereference vulnerability
unrar also known as unrar-free or unrar-gpl is a decompression software used in Linux. A security vulnerability exists in the 'DecodeNumber' function of the unrarlib.c file in unrar version 0.0.1. The vulnerability can be exploited to cause a denial of service null pointer backreference with the...
PT-2017-5442
Name of the Vulnerable Software and Affected Versions: FFmpeg version 1.1.4 Description: The issue is related to the vp3 decode frame function, which incorrectly moves threads check out of header packet type check. Recommendations: For FFmpeg version 1.1.4, consider updating to a newer version th...
librawspeed: Crash in void rawspeed::Cr2Decompressor::decodeN_X_Y<2, 1, 1>
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6718927029665792 Project: librawspeed Fuzzer: afllibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...
SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2017:2243-1)
This update for freeradius fixes the following issues: Security issues fixed : - CVE-2017-10988: Decode 'signed' attributes correctly. bnc1049086 - CVE-2017-10987: Check for option overflowing the packet. bnc1049086 - CVE-2017-10985: Fix infinite loop and memory exhaustion with 'concat' attribute...
DEBIAN-CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
UBUNTU-CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
Out-of-bounds
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...
CVE-2017-12940
CVE-2017-12940 affects libunrar.a in UnRAR prior to 5.5.7, with an out-of-bounds read in the EncodeFileName::Decode call inside Archive::ReadHeader15. Connected advisories confirm this was addressed in UnRAR 5.6.1, which fixes the out-of-bounds read alongside other related CVEs (12938, 12941, 129...
