Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-10077

Malware in sbrugna...

6.5CVSS6.8AI score0.00391EPSS
Exploits0References5
OSV
OSV
added 2024/12/25 5:15 p.m.6 views

CVE-2024-56431

ochufftreeunpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash...

9.8CVSS6.3AI score0.1436EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/12/25 12:0 a.m.1 views

Theora 安全漏洞

Theora is a reference implementation of the Theora video compression format open-sourced by Xiph. A security vulnerability exists in Theora that stems from an invalid left shift in the ochufftreeunpack function in the huffdec.c file...

9.8CVSS6.4AI score0.1436EPSS
Exploits1References4
Prion
Prion
added 2017/03/23 6:59 p.m.17 views

Code injection

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

4.3CVSS7AI score0.00391EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/03/23 6:59 p.m.14 views

CVE-2016-9266

listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...

6.5CVSS6.5AI score0.00391EPSS
Exploits0References3
CVE
CVE
added 2017/03/23 6:0 p.m.48 views

CVE-2016-9266

CVE-2016-9266 affects libming 0.4.7, where listmp3.c allows a remote attacker to cause an invalid left shift via a crafted MP3 file. The vulnerability is described as having an unspecified impact in the initial report, but multiple connected sources document a fix in libming 0.4.8. Fedora advisor...

6.5CVSS6.5AI score0.00391EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2016/09/20 2:15 p.m.19 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS6AI score0.00562EPSS
Exploits1References13
OSV
OSV
added 2016/09/20 2:15 p.m.6 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS7.3AI score0.00562EPSS
Exploits1References18
OSV
OSV
added 2016/09/20 2:15 p.m.0 views

DEBIAN-CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS8.3AI score0.00562EPSS
Exploits1References1
Prion
Prion
added 2016/09/20 2:15 p.m.19 views

Design/Logic Flaw

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

4.3CVSS6.8AI score0.00562EPSS
Exploits1References13Affected Software6
Cvelist
Cvelist
added 2016/09/20 2:0 p.m.22 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

6AI score0.00562EPSS
Exploits1References13
CVE
CVE
added 2016/09/20 2:0 p.m.100 views

CVE-2015-8932

The CVE-2015-8932 issue affects the libarchive library, specifically the compress_bidder_init function in archive_read_support_filter_compress.c, before version 3.2.0. A crafted tar file can trigger an invalid left shift, allowing a remote attacker to cause a denial of service (crash). Public ref...

5.5CVSS5.8AI score0.00562EPSS
Exploits1References13Affected Software1
Debian CVE
Debian CVE
added 2016/09/20 2:0 p.m.27 views

CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...

5.5CVSS6.3AI score0.00562EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2016/09/12 8:11 p.m.2 views

libarchive: Undefined behavior / invalid shiftleft in TAR parser

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS5.7AI score0.00562EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/09/12 7:54 p.m.1 views

libarchive: Undefined behavior / invalid shiftleft in TAR parser

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS5.7AI score0.00562EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2016/06/22 6:19 a.m.32 views

CVE-2015-8932

Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...

5.5CVSS2.7AI score0.00562EPSS
Exploits1References1
CNVD
CNVD
added 2016/06/21 12:0 a.m.1 views

libarchive TAR Parser Unauthorized Operation Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...

5.5CVSS6.9AI score0.00562EPSS
Exploits1References1
Rows per page
Query Builder