CVE-2017-14634

In libsndfile 1.0.28, a divide-by-zero error exists in the function double64init in double64.c, which may lead to DoS when playing a crafted audio file...

Path traversal

The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service tcpselectwindow divide-by-zero error and system crash by triggering a disconnect within a certain tcprecvmsg code path...

CVE-2017-14106

The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service tcpselectwindow divide-by-zero error and system crash by triggering a disconnect within a certain tcprecvmsg code path...

Denial of service

CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service divide-by-zero error via a crafted fpx image...

CVE-2017-12924

The vulnerability CVE-2017-12924 affects the library libfpx, specifically version 1.3.1_p6, where CDirVector::GetTable in dirfunc.hxx is vulnerable. A crafted FlashPIX image can trigger a divide-by-zero error, allowing remote attackers to cause a denial of service. The connected documents confirm...

AIX NTP v4 Advisory : ntp_advisory4.asc (IV79954) (IV79954)

The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...

CVE-2017-11546

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

CVE-2017-11359

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

Design/Logic Flaw

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

Denial of service

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

Design/Logic Flaw

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

CVE-2017-11546

CVE-2017-11546 affects TiMidity++ 2.14.0. The vulnerability is in the insert_note_steps function (readmidi.c) and Allows a crafted MIDI file to trigger a divide-by-zero and crash the application (potentially relevant when running with --background). Connected advisories confirm a security patch; ...

CVE-2017-11332

CVE-2017-11332 affects SoX (Sound eXchange), specifically the startread function in wav.c of version 14.4.2. A crafted WAV file with certain conditions can cause a divide-by-zero error, leading to a denial of service (application crash). This vulnerability is documented in Debian and other adviso...

CVE-2017-11359

CVE-2017-11359 affects SoX 14.4.2: the wavwritehdr function in wav.c can be triggered by a crafted snd file to cause a denial of service (divide-by-zero error and application crash) during WAV conversion. Public advisories note fixes/updates (e.g., Debian 14.4.1-5+deb8u3; DLA 1705-1; Alpine pages...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

Fedora 26 : ghostscript (2017-a606d224a5)

Security fixes release for these CVEs : - CVE-2016-10217 use-after-free and application crash - CVE-2016-10218 NULL pointer dereference and application crash - CVE-2016-10219 divide-by-zero error and application crash - CVE-2016-10220 NULL pointer dereference and application crash - CVE-2017-5951...

Denial of service

imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service divide-by-zero error via a crafted image, related to imagew-api.c...

CVE-2017-9201

imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service divide-by-zero error via a crafted image, related to imagew-api.c...

CVE-2017-9202

The CVE-2017-9202 issue affects ImageWorsener 1.3.1: imagew-cmd.c:854:45 in libimageworsener.a, related to imagew-api.c. A crafted image can trigger a divide-by-zero error, allowing remote denial of service. Documents confirm the vulnerable file and location, the affected version, and the DoS out...