CVE-2017-7244

The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...

CVE-2017-7244

The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...

CVE-2017-7244

The pcre32xclass function in pcrexclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service invalid memory read via a crafted file...

PT-2017-17605

Name of the Vulnerable Software and Affected Versions PCRE version 8.40 Description The issue allows remote attackers to cause a denial of service, specifically an invalid memory read, via a crafted file. This is due to a problem in the pcre32 xclass function in pcre xclass.c in libpcre1...

PT-2017-15054

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.9.x through 4.9.71 Description The issue is related to the Linux kernel's BPF verifier, which fails to check the relationship between pointer values and the BPF stack. This can be exploited by local users to cause a...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5505

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5505: Improper Restriction of Operations within the Bounds of a Memory Buffer

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

IBM WebSphere MQ Multiple Denial of Service Vulnerabilities (Mar 2017)

IBM WebSphere MQ is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

PT-2017-17332

Name of the Vulnerable Software and Affected Versions ytnef versions prior to 1.9.2 Description An issue has been discovered related to the handling of LONG data types, which can cause an invalid memory access, specifically a heap-based buffer over-read. This issue is associated with the MAPIPrin...

UBUNTU-CVE-2017-5836

The plistfreedata function in plist.c in libplist allows attackers to cause a denial of service crash via vectors involving an integer node that is treated as a PLISTKEY and then triggers an invalid free...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

Code injection

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

Design/Logic Flaw

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5503

CVE-2017-5503 affects JasPer library (JasPer 1.900.27) in the dec_clnpass path (libjasper/jpc/jpc_t1dec.c). A crafted image can trigger a denial of service via an invalid memory write, potentially with additional impact. Connected advisories confirm the same vulnerability across multiple vendor f...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...