CVE-2017-11462

Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...

CVE-2017-6362

CVE-2017-6362 is a double-free in libgd2’s gdImagePngPtr() prior to 2.2.5, enabling remote denial of service via vectors related to a palette with no colors. Debs/Mageia advisories report the fix to libgd2 2.2.5; some sources note potential arbitrary code execution on crafted input. No exploit de...

CVE-2017-11462

Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error...

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this...

CVE-2017-2808

CVE-2017-2808 affects Ledger-CLI 3.1.1, with a use-after-free in the account parsing component triggered by loading a specially crafted journal file, enabling arbitrary code execution. Multiple connected advisories cite this CVE and note remediation by upgrading Ledger to newer releases (e.g., Le...

CVE-2017-13711

CVE-2017-13711 : Use-after-free in QEMU’s Slirp implementation (slirp/socket.c, function sofree) can trigger a QEMU instance crash (DoS) when pending packets’ ifq_so is not properly cleared. The connected Nessus records (MiracleLinux AXSA-2018-2655:03) enumerate this CVE among others affected by ...

CVE-2015-7700

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors...

CVE-2015-7700

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors...

CVE-2015-7700

CVE-2015-7700 affects pngcrush before v1.7.87, with a double-free in the sPLT chunk structure and in png.c. The issue is described across multiple sources as allowing unspecified impact via unknown vectors. Public details identify the vulnerable component as pngcrush’s parsing/handling of sPLT an...

Ubuntu: Security Advisory (USN-3405-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3405-1: Linux kernel vulnerabilities

It was discovered that a use-after-free vulnerability existed in the POSIX message queue implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-11176 Huang Weller discovered that the ext4 filesyste...

CVE-2017-12925

CVE-2017-12925 affects libfpx 1.3.1_p6, with a vulnerability in DfFromLB (docfile.cxx) that can cause a denial of service via a crafted FlashPIX image due to a double-free flaw. Public references in the connected documents corroborate a DoS impact; exploitation details are not provided in the dat...

CVE-2017-12858

Double free vulnerability in the zipdirentread function in zipdirent.c in libzip allows attackers to have unspecified impact via unknown vectors...

CVE-2017-12858

CVE-2017-12858 is a double-free vulnerability in libzip’s _zip_dirent_read (zip_dirent.c) that allows arbitrary code execution via crafted ZIP archives. Arch Linux ASA-201711-13 and Fedora advisories confirm the impact as remote arbitrary code execution and indicate upstream fix in libzip 1.3.0. ...

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS...

CVE-2017-12932

Removed by vendor...

openSUSE Security Update : openldap2 (openSUSE-2017-936)

This update for openldap2 fixes the following issues : - Let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read boo1009470. - Fix CVE-2017-9287: openldap2: Double free vulnerability with patch boo1041764 - Fix an...

SUSE-SU-2017:2176-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c bsc1042826 - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file bsc1043289 - CVE-2017-11403:...

CVE-2017-11256

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11223

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution...