21 matches found
CVE-2026-43425
A flaw was found in the Linux kernel's mdc800 USB image driver. When the driver attempts to read data from a USB device, a timeout can occur, leaving a USB Request Block URB in an active state. If a subsequent read operation is initiated, the driver may attempt to resubmit this already active URB...
CVE-2023-54103
CVE-2023-54103 entry is rejected/not used by its CVE Numbering Authority.
EUVD-2017-18703
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2017-9773
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the Null image driver. CVE-2017-9773 Note that Nessus relies on the presence of...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the jpg driver, which may result in out-of-bounds writes. It could result in a local denial of service that requires system execution...
PT-2023-27574 · Unknown · Jpg Driver
Name of the Vulnerable Software and Affected Versions: jpg driver affected versions not specified Description: The issue is related to a possible out of bounds write in the jpg driver due to improper input validation. This could lead to local denial of service and requires System execution...
container-tools:rhel8 bug fix and enhancement update
An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.netavark, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.aardvark-dns, module.fuse-overlayfs, runc, criu, aardvark-dns,...
SUSE CVE-2009-0932
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the HordeImage driver name...
SUSE CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
Security update for singularity (important)
openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2020:1100-1 Rating: important References: 1174148 1174150 1174152 Cross-References: CVE-2020-13845 CVE-2020-13846 CVE-2020-13847 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes three...
Google Android Image Driver Component Mobilization Vulnerability (CNVD-2019-30705)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Image driver component in Android. An attacker can exploit this vulnerability to elevate privileges...
Google Android Image Driver Component Privilege Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Image driver component in Android. An attacker can exploit this vulnerability to elevate privileges...
CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
DEBIAN-CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
UBUNTU-CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
Design/Logic Flaw
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
CVE-2017-9773
CVE-2017-9773 affects Horde_Image (2.x up to 2.5.0); a crafted URL to the Null image driver could cause denial of service. Multiple connected advisories show fixes in Horde_Image 2.5.0 (and later 2.5.1) across distributions (e.g., Debian DSA-4276-1, Fedora updates). Remediation: upgrade to 2.5.0+...
CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...
pear-Horde_Image -- DoS vulnerability
Michael J Rubinsky reports: The second vulnerability CVE-2017-9773 is a DOS vulnerability. This only affects Horde installations that do not have a configured image handling backend, and thus use the "Null" image driver. It is exploitable by a logged in user clicking on a maliciously crafted URL...