Lucene search
+L

7311 matches found

Mend
Mend
•added 2018/02/28 9:00 p.m.•1 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

6.8CVSS0.02046EPSS
SaveExploits1References9
CVE
CVE
•added 2018/02/28 9:00 p.m.•273 views

CVE-2018-7569

CVE-2018-7569 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.30 and earlier. The flaw resides in dwarf2.c where a crafted ELF file containing a corrupted DWARF FORM block can trigger an integer underflow/overflow, leading to a denial of service (application crash). Th...

5.5CVSS6AI score0.02046EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2018/02/28 9:00 p.m.•38 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.2AI score0.02046EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2018/02/28 9:00 p.m.•72 views

CVE-2018-7569

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer underflow or overflow, and application crash via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm...

5.5CVSS6.4AI score0.02046EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2018/02/28 12:00 a.m.•1 views

PT-2018-2388

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30 Description The issue is related to the parse die function in the dwarf2.c file of the Binary File Descriptor BFD library, also known as libbfd, which is part of GNU Binutils. It allows remote attackers to cause a...

5.5CVSS0.02046EPSS
SaveExploits1
OSV
OSV
•added 2018/02/26 11:40 p.m.•12 views

MGASA-2018-0146 Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References3
Mageia
Mageia
•added 2018/02/26 11:40 p.m.•52 views

Updated jhead package fixes security vulnerability

Updated jhead package fixes security vulnerability: An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecifie...

5.5CVSS4.4AI score0.01131EPSS
SaveExploits0References2
Prion
Prion
•added 2018/02/04 3:29 p.m.•24 views

Heap overflow

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

4.3CVSS5.5AI score0.01131EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2018/02/04 3:29 p.m.•14 views

DEBIAN-CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS7.2AI score0.01131EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/02/04 3:29 p.m.•36 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.9AI score0.01131EPSS
SaveExploits0References5
NVD
NVD
•added 2018/02/04 3:29 p.m.•36 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/04 3:29 p.m.•12 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.6AI score
SaveExploits0References2
CVE
CVE
•added 2018/02/04 3:00 p.m.•173 views

CVE-2018-6612

CVE-2018-6612 affects jhead, issue arising from an integer underflow in process_EXIF in exif.c that causes a heap-based buffer over-read when parsing JPEGs. Reports across multiple advisories indicate impact on jhead 3.00 and that updates exist (e.g., jhead updated to 3.06.x in several distributi...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/02/04 3:00 p.m.•53 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.7AI score0.01131EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/02/04 3:00 p.m.•74 views

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS5.8AI score0.01131EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/02/04 12:00 a.m.•4 views

PT-2018-17670

Name of the Vulnerable Software and Affected Versions jhead version 3.00 Description The issue is caused by an integer underflow bug in the process EXIF function of the exif.c file, which leads to a heap-based buffer over-read when processing a malicious JPEG file. This may allow a remote attacke...

5.5CVSS0.01131EPSS
SaveExploits0References34
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/04 12:00 a.m.•3 views

CVE-2018-6612: Out-of-bounds Read

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

5.5CVSS6.7AI score0.01131EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2018/02/01 4:06 p.m.•16 views

chromium-browser: integer underflow in webassembly

Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page...

6.5CVSS7.4AI score0.01615EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2018/01/12 12:00 a.m.•53 views

FFmpeg Information Disclosure Vulnerability

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

5.5CVSS5.2AI score0.01478EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2018/01/11 8:55 p.m.•40 views

Ruby: Integer Underflow @ ossl_cipher_pkcs5_keyivgen

Integer Underflow @ osslcipherpkcs5keyivgen file : ext/openssl/osslcipher.c affected parameter: iterations INFO Generates and sets the key/IV based on a password. call-seq: cipher.pkcs5keyivgenpass, salt = nil, iterations = 2048, digest = "MD5" - nil ANALYSIS iterint in osslcipherpkcs5keyivgen...

6.8AI score
SaveExploits0
Rows per page
Query Builder