CVE-2017-11540: Out-of-bounds Read

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

CVE-2017-11568

FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...

PT-2017-12110

Name of the Vulnerable Software and Affected Versions FontForge version 20161012 Description The issue is related to a heap-based buffer over-read in the readcfftopdicts function, located in parsettf.c, which can be triggered by a crafted otf file. This can result in a denial of service DoS or...

PT-2017-12106

Name of the Vulnerable Software and Affected Versions FontForge version 20161012 Description The issue is related to a heap-based buffer over-read in the readttfcopyrights function, located in parsettf.c, which can lead to denial of service DoS or code execution. This can be triggered by a crafte...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

PT-2017-12077

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file, leading to a heap-based buffer over-read in the WritePSImage function. Recommendations For ImageMagick version 7.0.6-1, consider updating to a...

CVE-2017-11535

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...

PT-2017-12075

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file, leading to a heap-based buffer over-read in the WriteUILImage function. Recommendations For ImageMagick version 7.0.6-1, consider updating to a...

PT-2017-12084

Name of the Vulnerable Software and Affected Versions tcpdump version 4.9.0 Description The issue is related to a heap-based buffer over-read in the lldp print function, which could allow a remote attacker to obtain sensitive information by sending a specially crafted request. This is caused by a...

CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-11336

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

Summary: CVE-2017-9951 is a heap-based buffer over-read in memcached’s try_read_command path, exploitable remotely to cause a Denial of Service (segmentation fault). This is triggered by specially crafted add/set requests and stems from a signed/unsigned integer comparison, linked to an incomplet...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951: Undefined Security Weakness

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...