CVE-2017-15938

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, miscalculates DWFORMrefaddr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service findabstractinstancename invalid memory read, segmentation...

CVE-2017-15938

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, miscalculates DWFORMrefaddr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service findabstractinstancename invalid memory read, segmentation...

CVE-2017-15938

CVE-2017-15938 affects the Binary File Descriptor (BFD) library (GNU Binutils 2.29). The flaw in dwarf2.c miscalculates DW_FORM_ref_addr die refs for relocatable objects, allowing a remote attacker to trigger a denial of service via an invalid memory read, leading to segmentation fault and applic...

CVE-2017-15938

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, miscalculates DWFORMrefaddr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service findabstractinstancename invalid memory read, segmentation...

Integer overflow

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15932

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverdef in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems...

CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

CVE-2017-15931

In radare2 2.0.1, an integer exception negative number leading to an invalid memory access exists in storeversioninfognuverneed in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems...

PT-2017-14291

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description The issue exists in the store versioninfo gnu verdef function in libr/bin/format/elf/elf.c, where an integer exception occurs due to a negative number leading to an invalid memory access. This happens when...

PT-2017-14290

Name of the Vulnerable Software and Affected Versions radare2 version 2.0.1 Description The issue exists in the store versioninfo gnu verneed function in libr/bin/format/elf/elf.c, where an integer exception occurs due to a negative number leading to an invalid memory access. This can be triggere...

DEBIAN-CVE-2017-14862

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PYSEC-2017-135

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2017-10895

Name of the Vulnerable Software and Affected Versions tcmu-runner versions 0.9.0 through 1.2.0 Description The issue is related to invalid memory references in the handler glfs.so handler, which can result in denial of service. Recommendations For versions 0.9.0 through 1.2.0, update to a version...

CVE-2017-14862: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14859

CVE-2017-14859 affects Exiv2 up to version 0.26, where an invalid memory address dereference in Exiv2::StringValueBase::read (value.cpp) can cause a segmentation fault and denial of service. The connected documents confirm this precise root cause and the resulting crash vector, and cite multiple ...

UBUNTU-CVE-2017-14862

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2017-4064

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid memory address dereference in the Exiv2::StringValueBase::read function in value.cpp of the Exiv2 library. This can cause a segmentation fault and application crash, leading to...

CVE-2017-14412

An invalid memory write was discovered in copymp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service segmentation fault and application crash or possibly unspecified other impact...

DEBIAN-CVE-2017-14412

An invalid memory write was discovered in copymp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service segmentation fault and application crash or possibly unspecified other impact...