CVE-2013-7108

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...

CVE-2013-7205

Nagios Core is affected by CVE-2013-7205 due to an off-by-one error in process_cgivars() (contrib/daemonchk.c). The flaw can cause a heap-based buffer over-read, enabling remote authenticated users to read process memory or trigger a denial of service. Public references in multiple advisories (De...

CVE-2013-7108

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...

CVE-2013-7108

CVE-2013-7108 affects Nagios Core 3.5.1, 4.0.2 and older, and Icinga up to certain releases. It is an off-by-one/heap-over-read flaw in process_cgivars() triggered by a long parameter value, allowing remote authenticated users to read process memory or cause a DoS. Affected products include Nagio...

CVE-2013-7108

Removed by vendor...

CVE-2013-7205

Off-by-one error in the processcgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in the variable list,...

PT-2014-1782

Name of the Vulnerable Software and Affected Versions Icinga versions prior to 1.8.5 Icinga versions 1.9 prior to 1.9.4 Icinga versions 1.10 prior to 1.10.2 Description The issue is related to multiple off-by-one errors in the Icinga package, which can be exploited remotely to compromise the...

PT-2014-3287

Name of the Vulnerable Software and Affected Versions Nagios Core versions 3.5.1, 4.0.2, and earlier Description The issue is related to an off-by-one error in the process cgivars function. This error can be triggered by a long string in the last key value in the variable list, leading to a...

CVE-2013-7108: Improper Input Validation

Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...

CVE-2013-7205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in the processcgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in the variable list,...

CVE-2013-6712

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

Heap overflow

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

CVE-2013-6712

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

CVE-2013-6712

CVE-2013-6712 affects PHP up to 5.5.6, where the DateInterval object creation from parsed ISO intervals was not properly restricted. This can enable a remote attacker to trigger a heap-based buffer over-read, leading to a denial of service. The issue is reported across multiple advisories/vendors...

CVE-2013-6712

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

CVE-2013-6712: Improper Restriction of Operations within the Bounds of a Memory Buffer

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

PT-2013-1042

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.7 PHP through 5.5.6 Description The issue exists in the scan function in ext/date/lib/parse iso intervals.c in PHP due to incorrect restriction of DateInterval object creation. This allows remote attackers to cause a...

CVE-2013-1720

The CVE-2013-1720 issue affects Mozilla Firefox (pre-24.0), Thunderbird (pre-24.0), and SeaMonkey (pre-2.21) where the nsHtml5TreeBuilder::resetTheInsertionMode logic fails to correctly maintain the insertion-mode stack for template elements. This misstate allows a remote attacker to trigger use ...

CVE-2013-1720

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute...

CVE-2012-4513

khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and a heap-based buffer over-read...