4482 matches found
freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63
An out-of-bounds read flaw was found in the way FreeRADIUS server handled decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a specially crafted DHCP request...
PT-2017-3045
Name of the Vulnerable Software and Affected Versions Libidn2 versions prior to 2.0.4 Description The issue is caused by an integer overflow in the decode digit function in puny decode.c, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified...
FFmpeg 'libavcodec/dnxhddec.c' Denial of Service Vulnerability
FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. A security vulnerability in the processing of DNxHD files by the FFmpeg libavcodec/dnxhddec.c/dnxhddecodeheader function allows an attacker to exploit the vulnerability by submittin...
ALPINE-CVE-2017-11719
The dnxhddecodeheader function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a crafted DNxHD file...
DEBIAN-CVE-2017-11719
The dnxhddecodeheader function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via a crafted DNxHD file...
DEBIAN-CVE-2017-11434
The dhcpdecode function in slirp/bootp.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash via a crafted DHCP options string...
PT-2017-6868
Name of the Vulnerable Software and Affected Versions ZenPhoto versions prior to 1.4.9 Description The issue is related to the sanitize string function, which used the html entity decode function after input sanitation. This could potentially allow remote attackers to perform a cross-site scripti...
FreeRADIUS 'fr_dhcp_decode_options()' function buffer out-of-bounds read vulnerability
FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...
FreeRADIUS 'fr_dhcp_decode()' function memory leak vulnerability
FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...
DEBIAN-CVE-2017-10980
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...
PT-2017-11658
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.x before 2.2.10 Description The issue allows for a denial of service and is related to a memory leak in the fr dhcp decode function. Recommendations For FreeRADIUS versions 2.x before 2.2.10, update to version 2.2.10 or...
PT-2017-11659
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.x through 2.2.9 Description The issue allows for a denial of service due to a buffer over-read in the fr dhcp decode options function. Recommendations For FreeRADIUS versions 2.x through 2.2.9, update to version 2.2.10 or...
PT-2017-11657
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions prior to 2.2.10 Description The issue allows for a denial of service and is related to a memory leak in the decode tlv function for DHCP. Recommendations For versions prior to 2.2.10, update to version 2.2.10 or later to...
PT-2017-11663
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions prior to 3.0.15 Description The issue allows for a denial of service due to a buffer over-read in the fr dhcp decode suboptions function. Recommendations For versions prior to 3.0.15, update to version 3.0.15 or later to...
UBUNTU-CVE-2017-10981
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...
librawspeed: Bad-cast to rawspeed::RawDecoder from invalid vptr;rawspeed::RawDecoderDecodeThread;rawspeed::RawDecoder::startTasks
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4612305675354112 Project: librawspeed Fuzzer: libFuzzerlibrawspeedX3fParserFuzzer-GetDecoder-Decode Fuzz target binary: X3fParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeed...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to perform out-of-memory writes, related to the decodezbuf function in libavcodec/pngdec.c...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...
Oracle Linux 7 : kernel (ELSA-2017-1615)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1615 advisory. - mm enlarge stack guard gap Larry Woodman 1452732 1452733 CVE-2017-1000364 - fs nfsd: stricter decoding of write-like NFSv2/v3 ops 'J. Bruce Fields'...