CVE-2017-10685: Use of Externally-Controlled Format String

In ncurses 6.0, there is a format string vulnerability in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

PT-2017-11437

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to a format string vulnerability in the fmt entry function. This vulnerability can be exploited with a crafted input, potentially leading to a remote arbitrary code execution attack...

VulnCheck KEV: CVE-2017-5613

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file...

VulnCheck KEV: CVE-2001-0690

Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...

CVE-2017-7519

In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library...

Format string

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

CVE-2017-9212

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

CVE-2017-9212

The CVE concerns the Bluetooth stack in the 2011 BMW 330i. A vulnerability in the device name string allows remote crash of the CD/Multimedia software via format string specifiers like %x or %c. This is a network-accessible issue tied to the Bluetooth stack, with a high impact on availability (CR...

CVE-2017-9212

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

CVE-2017-9212: Use of Externally-Controlled Format String

The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name...

PT-2017-18791

Name of the Vulnerable Software and Affected Versions BMW 330i 2011 Description The issue concerns the Bluetooth stack, which allows a remote crash of the CD/Multimedia software. This can be achieved by using %x or %c format string specifiers in a device name. Recommendations For the BMW 330i 201...

PT-2017-4282 · Rsyslog +1 · Rsyslog +1

Name of the Vulnerable Software and Affected Versions: Rsyslog versions prior to 8.28.0 Description: The issue is related to insufficient processing of format strings in the input/output modules of the Rsyslog utility for log processing. Exploitation of this issue could allow a remote attacker to...

Cisco IOS DHCP Service Reboot DoS

The vulnerability of the DHCP service in Cisco IOS operating systems is related to the use of an uncontrolled format string. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure through a specially crafted DHCP packet...

Format string

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy...

CVE-2016-4864

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy...

CVE-2016-4864

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy...

CVE-2016-4864

CVE-2016-4864 affects H2O web server: versions 2.0.3 and earlier and 2.1.0-beta2 and earlier are vulnerable to a DoS via format string specifiers in template files processed by fastcgi, mruby, proxy, redirect or reproxy. Connected sources confirm this vulnerability class and affected ranges, with...

CVE-2016-4864

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy...

CVE-2016-4864

H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file via fastcgi, mruby, proxy, redirect or reproxy...

PT-2017-8561

Name of the Vulnerable Software and Affected Versions H2O versions 2.0.3 and earlier H2O version 2.1.0-beta2 and earlier Description The issue allows remote attackers to cause a denial-of-service DoS via format string specifiers in a template file. This can be achieved through various means such ...