Lucene search
K

4773 matches found

UbuntuCve
UbuntuCve
added 2018/02/28 9:29 p.m.24 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.8AI score0.02118EPSS
Exploits1References2
NVD
NVD
added 2018/02/28 9:29 p.m.16 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.2AI score0.02118EPSS
Exploits1References6
AlpineLinux
AlpineLinux
added 2018/02/28 9:0 p.m.42 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.4AI score0.02118EPSS
Exploits1
CVE
CVE
added 2018/02/28 9:0 p.m.243 views

CVE-2018-7569

CVE-2018-7569 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.30 and earlier. The flaw resides in dwarf2.c where a crafted ELF file containing a corrupted DWARF FORM block can trigger an integer underflow/overflow, leading to a denial of service (application crash). Th...

5.5CVSS6AI score0.02118EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2018/02/28 9:0 p.m.24 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.2AI score0.02118EPSS
Exploits1
Mageia
Mageia
added 2018/02/26 11:40 p.m.36 views

Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS4.4AI score0.01138EPSS
Exploits0References2
OSV
OSV
added 2018/02/26 11:40 p.m.6 views

MGASA-2018-0146 Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS5.6AI score0.01138EPSS
Exploits0References3
Prion
Prion
added 2018/02/04 3:29 p.m.16 views

Heap overflow

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

4.3CVSS5.5AI score0.01138EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2018/02/04 3:29 p.m.30 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.9AI score0.01138EPSS
Exploits0References5
NVD
NVD
added 2018/02/04 3:29 p.m.22 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score0.01138EPSS
Exploits0References2
OSV
OSV
added 2018/02/04 3:29 p.m.2 views

DEBIAN-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS7.2AI score0.01138EPSS
Exploits0References1
OSV
OSV
added 2018/02/04 3:29 p.m.6 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score
Exploits0References2
CVE
CVE
added 2018/02/04 3:0 p.m.150 views

CVE-2018-6612

CVE-2018-6612 affects jhead, issue arising from an integer underflow in process_EXIF in exif.c that causes a heap-based buffer over-read when parsing JPEGs. Reports across multiple advisories indicate impact on jhead 3.00 and that updates exist (e.g., jhead updated to 3.06.x in several distributi...

5.5CVSS5.6AI score0.01138EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/02/04 3:0 p.m.28 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.7AI score0.01138EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2018/02/04 3:0 p.m.30 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.8AI score0.01138EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2018/02/01 4:6 p.m.4 views

chromium-browser: integer underflow in webassembly

Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page...

6.5CVSS7.4AI score0.01615EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2018/01/12 12:0 a.m.24 views

FFmpeg Information Disclosure Vulnerability

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

5.5CVSS5.2AI score0.01485EPSS
Exploits0References2
Hacker One
Hacker One
added 2018/01/11 8:55 p.m.33 views

Ruby: Integer Underflow @ ossl_cipher_pkcs5_keyivgen

Integer Underflow @ osslcipherpkcs5keyivgen file : ext/openssl/osslcipher.c affected parameter: iterations INFO Generates and sets the key/IV based on a password. call-seq: cipher.pkcs5keyivgenpass, salt = nil, iterations = 2048, digest = "MD5" - nil ANALYSIS iterint in osslcipherpkcs5keyivgen...

6.8AI score
Exploits0
NVD
NVD
added 2018/01/09 4:29 p.m.21 views

CVE-2015-1208

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

5.5CVSS5.2AI score0.01485EPSS
Exploits0References3
Prion
Prion
added 2018/01/09 4:29 p.m.11 views

Integer overflow

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

4.3CVSS6.6AI score0.01485EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder