PT-2018-14308

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1 Description A heap-based buffer over-read issue was discovered in the dlt en10mb encode function of the file plugins/dlt en10mb/en10mb.c. This occurs due to inappropriate values in the memmove function, where the...

CVE-2018-17974: Out-of-bounds Read

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlten10mbencode of the file plugins/dlten10mb/en10mb.c, due to inappropriate values in the function memmove. The length pktlen + ctx - l2len can be larger than source value packet +...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17427

SIMDComp (C library for binary packing) is affected by CVE-2018-17427. Versions before 0.1.0 allow remote attackers to cause a denial of service via a heap-based buffer over-read by reading (and then discarding) extra bytes, leading to application crashes. Public reports in CNVD/OSV/CVE records c...

CVE-2018-17854

CVE-2018-17854 concerns the SIMDComp library: versions before 0.1.1 are vulnerable to a denial-of-service via a heap-based buffer over-read caused by reading (and discarding) extra bytes. The issue stems from an incomplete fix related to CVE-2018-17427. Impact is DoS (application crash) with netw...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

PT-2018-14226

Name of the Vulnerable Software and Affected Versions SIMDComp versions prior to 0.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, because it can read extra bytes and then discard them. Recommendatio...

PT-2018-14023

Name of the Vulnerable Software and Affected Versions SIMDComp versions prior to 0.1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, because it can read and then discard extra bytes. Recommendations Fo...

CVE-2018-17427: Out-of-bounds Read

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17854: Out-of-bounds Read

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17435

A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file...

CVE-2018-17580

A heap-based buffer over-read exists in the function fasteditpacket in the file sendpackets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service DoS and potentially Information Exposure when the application attempts to process a crafted pcap file...

CVE-2018-17582

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket function in the sendpackets.c file uses the memcpy function unsafely to copy sequences from the source buffer pktdata to the destination prevpacket-pktdata. This will result in a Denial of Service DoS and potentially...

CVE-2018-17580

A heap-based buffer over-read exists in the function fasteditpacket in the file sendpackets.c of Tcpreplay v4.3.0 beta1. This can lead to Denial of Service DoS and potentially Information Exposure when the application attempts to process a crafted pcap file...