UBUNTU-CVE-2016-3140

The digiportinit function in drivers/usb/serial/digiacceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a crafted endpoints value in a USB device descriptor...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the libavcodec/gif.c function in the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other effects by using a specially created .tga file related to the functions...

DEBIAN-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

ALPINE-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

iptables-persistent '/etc/iptables' local information disclosure vulnerability

iptables-persistent is an init.d script used to make iptables rules restart continuously. A security vulnerability exists in iptables-persistent, which allows local attackers to exploit the vulnerability to obtain sensitive information...

PT-2015-7843

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted tar file. This crafted file triggers an invalid left shift in the compress bidder init...

PT-2015-3157

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.3 Description The issue is related to the h264 slice header init function in libavcodec/h264 slice.c, which does not properly validate the relationship between the number of threads and the number of slices. This c...

PT-2015-7772

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.6.5 FFmpeg versions 2.7.x prior to 2.7.3 FFmpeg versions 2.8.x through 2.8.2 Description The issue is related to an integer overflow in the ff ivi init planes function, which can be triggered by crafted image...

FFmpeg 'init_tile' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'inittile' function in the libavcodec/jpeg2000dec.c file in versions of FFmpeg prior to 2.8.2. Due to the program failing to enforce maximum and minim...

Linux kernel denial of service vulnerability (CNVD-2015-06890)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'slhcinit' function in the drivers/net/slip/slhc.c file in Linux kernel 4.2.2 and earlier versions. A local attacker can exploit this...

UBUNTU-CVE-2015-7799

The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted PPPIOCSMAXCID ioctl call...

PT-2015-7617

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.3 Description The issue is related to the slhc init function in the Linux kernel, which does not validate certain slot numbers. This allows local users to cause a denial of service, resulting in a NULL pointe...

Oracle: Security Advisory (ELSA-2013-1436)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...

Mozilla Firefox and Firefox ESR libvpx Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability in the 'vp9initcontextbuffers' function in the Mozilla Firefox libvpx allows remote attackers to construct a malicious WEB page that can be tricked into being parsed by the user to crash the application or execute...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...

PT-2015-2168

Name of the Vulnerable Software and Affected Versions libvpx versions as used in Mozilla Firefox before 41.0 Mozilla Firefox ESR versions 38.x before 38.3 Description The issue is caused by a buffer overflow in the vp9 init context buffers function in libvpx. This allows remote attackers to execu...

UBUNTU-CVE-2015-4506

Buffer overflow in the vp9initcontextbuffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file...

SUSE-SU-2015:1565-1 Security update for tomcat6

This update for Tomcat fixes the following security issues: - CVE-2014-7810: Security manager bypass via EL expressions. bsc931442 It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could have used this flaw to...

FFmpeg ff_frame_thread_init Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffframethreadinit' function in the libavcodec/pthreadframe.c file in versions of FFmpeg prior to 2.7.2, which stems from the program's failure to...