Lucene search
K

1012 matches found

FreeBSD
FreeBSD
added 2017/05/09 12:0 a.m.34 views

miniupnpc -- integer signedness error

Tintinweb reports: An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on the local network segment to trigger a heap corruption or an access violation in miniupnp's http response parser when processing a specially crafted...

9.8CVSS0.8AI score0.24381EPSS
Exploits6References1
OSV
OSV
added 2017/03/29 8:59 p.m.5 views

CVE-2017-7308

The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...

7.8CVSS6.8AI score
Exploits0References12
Cvelist
Cvelist
added 2017/03/29 8:0 p.m.27 views

CVE-2017-7308

The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...

7.5AI score0.87EPSS
Exploits17References12
OSV
OSV
added 2017/03/29 12:0 a.m.0 views

UBUNTU-CVE-2017-7308

The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...

7.8CVSS6.7AI score0.87EPSS
Exploits17References5
NVD
NVD
added 2017/01/27 10:59 p.m.11 views

CVE-2016-6264

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...

7.5CVSS7.2AI score0.02321EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2017/01/27 10:59 p.m.16 views

CVE-2016-6264

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...

7.5CVSS7.1AI score0.02321EPSS
Exploits0References3
Cvelist
Cvelist
added 2017/01/27 10:1 p.m.18 views

CVE-2016-6264

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...

7.2AI score0.02321EPSS
Exploits0References6
CVE
CVE
added 2017/01/27 10:1 p.m.61 views

CVE-2016-6264

CVE-2016-6264 is a memory-safety issue in uClibc and uClibc-ng prior to 1.0.16. The bug is an integer signedness error in libc/string/arm/memset.S that allows context-dependent attackers to crash the process (denial of service) via a negative length value passed to memset. Affected products are u...

7.5CVSS7.1AI score0.02321EPSS
Exploits0References6Affected Software2
Debian CVE
Debian CVE
added 2017/01/27 10:1 p.m.28 views

CVE-2016-6264

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...

7.5CVSS7.2AI score0.02321EPSS
Exploits0
NVD
NVD
added 2017/01/04 8:59 p.m.16 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS9.9AI score0.01746EPSS
Exploits0References8
OSV
OSV
added 2017/01/04 8:59 p.m.3 views

DEBIAN-CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS9.5AI score0.01746EPSS
Exploits0References1
OSV
OSV
added 2017/01/04 8:59 p.m.28 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS7.8AI score
Exploits0References8
Debian CVE
Debian CVE
added 2017/01/04 8:0 p.m.29 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS10AI score0.01746EPSS
Exploits0
Cvelist
Cvelist
added 2017/01/04 8:0 p.m.26 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

8.4AI score0.01746EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2016/11/02 2:17 p.m.28 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS6.6AI score0.01746EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2016/10/14 12:0 a.m.38 views

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

9.8CVSS7.4AI score0.01746EPSS
Exploits0References3
Mageia
Mageia
added 2016/08/31 3:32 p.m.30 views

Updated bsdiff packages fix security vulnerability

Integer signedness error in bspatch.c in bspatch in bsdiff allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file CVE-2014-9862...

7.8CVSS8.2AI score0.09005EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2016/08/08 12:0 a.m.194 views

Splunk Enterprise < 5.0.16 / 6.0.12 / 6.1.11 / 6.2.11 / 6.3.6 / 6.4.2 or Splunk Light < 6.4.2 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk Enterprise hosted on the remote web server is 5.0.x, 6.0.x prior to 6.0.12, 6.1.x prior to 6.1.11, 6.2.x prior to 6.2.11, 6.3.x prior to 6.3.6, or 6.4.x prior to 6.4.2; or else it is Splunk Light version 6.4.x prior to 6.4.2. It...

8.8CVSS7.4AI score0.79963EPSS
Exploits8References6
Tenable Nessus
Tenable Nessus
added 2016/08/01 12:0 a.m.42 views

Debian DLA-569-1 : xmlrpc-epi security update

Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a long first argument to the PHP xmlrpcencoderequest function. For...

9.8CVSS7.3AI score0.13001EPSS
Exploits1References3
Debian
Debian
added 2016/07/29 9:13 p.m.47 views

[SECURITY] [DLA 569-1] xmlrpc-epi security update

Package : xmlrpc-epi Version : 0.54.2-1+deb7u1 CVE ID : CVE-2016-6296 Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact...

9.8CVSS8.9AI score0.13001EPSS
Exploits1
Rows per page
Query Builder