CVE-2017-11568: Out-of-bounds Read

FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...

CVE-2017-11542: Out-of-bounds Read

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

CVE-2017-11533: Out-of-bounds Read

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...

CVE-2017-11540: Out-of-bounds Read

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

CVE-2017-11535

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...

PT-2017-12084

Name of the Vulnerable Software and Affected Versions tcpdump version 4.9.0 Description The issue is related to a heap-based buffer over-read in the lldp print function, which could allow a remote attacker to obtain sensitive information by sending a specially crafted request. This is caused by a...

PT-2017-12077

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file, leading to a heap-based buffer over-read in the WritePSImage function. Recommendations For ImageMagick version 7.0.6-1, consider updating to a...

CVE-2017-11542

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1print function in print-pim.c...

PT-2017-12075

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file, leading to a heap-based buffer over-read in the WriteUILImage function. Recommendations For ImageMagick version 7.0.6-1, consider updating to a...

CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-11336

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

CVE-2017-9951

Summary: CVE-2017-9951 is a heap-based buffer over-read in memcached’s try_read_command path, exploitable remotely to cause a Denial of Service (segmentation fault). This is triggered by specially crafted add/set requests and stems from a signed/unsigned integer comparison, linked to an incomplet...

CVE-2017-9951

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerabili...

PT-2017-19355

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Image::printIFDStructure function in image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...