Lucene search
+L

1149 matches found

Prion
Prion
•added 2017/10/18 9:29 p.m.•20 views

Integer overflow

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

5CVSS7.3AI score0.01514EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2017/10/18 9:29 p.m.•11 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.3AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/10/18 9:29 p.m.•35 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.1AI score0.01514EPSS
SaveExploits1References4
NVD
NVD
•added 2017/10/18 9:29 p.m.•29 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.3AI score0.01514EPSS
SaveExploits1References3
CVE
CVE
•added 2017/10/18 9:00 p.m.•96 views

CVE-2017-15602

GNU Libextractor 1.4 contains a signedness error in EXTRACTOR_nsfe_extract_method (plugins/nsfe_extractor.c) that can cause an infinite loop when given a crafted chunk size. Affected component is the nsfe_extractor, with the root cause described as an integer signedness issue for chunk size. The ...

7.5CVSS7.2AI score0.01514EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2017/10/18 9:00 p.m.•40 views

CVE-2017-15602

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.3AI score0.01514EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/18 12:00 a.m.•2 views

CVE-2017-15602: Loop with Unreachable Exit Condition

In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTORnsfeextractmethod function in plugins/nsfeextractor.c, leading to an infinite loop for a crafted size...

7.5CVSS7.3AI score0.01514EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2017/10/09 12:00 a.m.•37 views

Debian DLA-1127-1 : sam2p security update

Several vulnerabilites, like heap-based buffer overflows, integer signedness or overflow errors have been found by fpbibi and have been fixed by upstream. For Debian 7 'Wheezy', these problems have been fixed in version 0.49.1-1+deb7u1. We recommend that you upgrade your sam2p packages. NOTE:...

9.8CVSS8.2AI score0.01694EPSS
SaveExploits5References8
Prion
Prion
•added 2017/09/21 7:29 a.m.•26 views

Heap overflow

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

7.5CVSS9.4AI score0.01634EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2017/09/21 7:29 a.m.•28 views

CVE-2017-14629

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

7.5CVSS7.1AI score0.01406EPSS
SaveExploits1References2
NVD
NVD
•added 2017/09/21 7:29 a.m.•49 views

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

9.8CVSS9.5AI score0.01634EPSS
SaveExploits1References1
OSV
OSV
•added 2017/09/21 7:29 a.m.•23 views

CVE-2017-14629

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

7.5CVSS7AI score
SaveExploits0References1
OSV
OSV
•added 2017/09/21 7:29 a.m.•26 views

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

9.8CVSS7.2AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/09/21 7:29 a.m.•34 views

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

9.8CVSS7.5AI score0.01634EPSS
SaveExploits1References2
NVD
NVD
•added 2017/09/21 7:29 a.m.•26 views

CVE-2017-14629

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

7.5CVSS7.4AI score0.01406EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2017/09/21 7:00 a.m.•37 views

CVE-2017-14629

In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...

8.4AI score0.01406EPSS
SaveExploits1References1
CVE
CVE
•added 2017/09/21 7:00 a.m.•79 views

CVE-2017-14629

CVE-2017-14629 affects sam2p 0.49.3: the in_xpm_reader function in in_xpm.cpp contains a signedness error that can crash the process when writing to an out-of-bounds array element (DoS). Multiple connected sources confirm the same issue and list this CVE among a set of fixes for sam2p; upstream r...

7.5CVSS8.3AI score0.01406EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2017/09/21 7:00 a.m.•92 views

CVE-2017-14631

sam2p 0.49.3 is affected by CVE-2017-14631 due to a signedness error in pcxLoadRaster within in_pcx.cpp, causing a heap-based buffer overflow. This affects the ability to process inputs that trigger the flaw and can lead to denial of service as described in CNVD-2017-34028 and related advisories....

9.8CVSS9.2AI score0.01634EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/09/21 7:00 a.m.•45 views

CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

9.4AI score0.01634EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/21 12:00 a.m.•3 views

CVE-2017-14631: Improper Restriction of Operations within the Bounds of a Memory Buffer

In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...

9.8CVSS8.3AI score0.01634EPSS
SaveExploits1References2
Rows per page
Query Builder