UBUNTU-CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...

DEBIAN-CVE-2017-6309

An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...

CVE-2017-6307

CVE-2017-6307 affects the tnef project (MS-TNEF MIME unpacker). The issue is two out-of-bounds writes in mapi_attr_read() (src/mapi_attr.c) that could lead to invalid read/write operations, with the advisory stating vulnerable versions up to 1.4.13 and fixes delivered in newer releases. Fedora an...

F5 Networks BIG-IP : libarchive vulnerability (K35263486)

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

DEBIAN-CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

UBUNTU-CVE-2016-8688

The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

UBUNTU-CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

DEBIAN-CVE-2016-1504

dhcpcd before 6.10.0 allows remote attackers to cause a denial of service invalid read and crash via vectors related to the option length...

CVE-2016-1504

The CVE-2016-1504 entry concerns the dhcpcd DHCP client before version 6.10.0. The vulnerability arises from handling of DHCP option length, enabling remote attackers to trigger an invalid read and crash (Denial of Service). Impact is described as a crash/DoS with network-originated packets; expl...

CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

CVE-2016-5321

The CVE-2016-5321 entry concerns LibTIFF DumpModeDecode (libtiff

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:0211-1)

This update for gstreamer-plugins-base fixes the following issues : - CVE-2016-9811: Malicious file could could cause an invalid read leading to crash bsc1013669 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

UBUNTU-CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...

SUSE SLES11 Security Update : php53 (SUSE-SU-2017:0109-1)

This update for php53 fixes the following issues : - CVE-2014-9912: Stack-based buffer overflow in ulocgetDisplayName bsc1012232 - CVE-2016-9933: Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934: Dereference from NULL pointer could lead to crash bsc1015188 -...

SUSE-SU-2017:0017-1 Security update for php7

This update for php7 fixes the following issues: CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 CVE-2016-9935 Invalid read could lead to crash bsc1015189 CVE-2016-9936 Use After free in the...

FreeBSD : PHP -- multiple vulnerabilities (6972668d-cdb7-11e6-a9a5-b499baebfeaf)

The PHP project reports : - Use After Free Vulnerability in unserialize CVE-2016-9936 - Invalid read when wddx decodes empty boolean element CVE-2016-9935 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

Updated php packages fix security vulnerability

NULL Pointer Dereference in WDDX Packet Deserialization with PDORow in PHP before 5.6.28 CVE-2016-9934. Invalid read when wddx decodes empty boolean element in PHP before 5.6.29 CVE-2016-9935...

Internet Bug Bounty: Invalid read when wddx decodes empty boolean element

Description ----------- I have found some vulnerable code in wddx extension. The trouble happens when trying to process 'boolean' tag. If I open tag without data, new stentry item WILL NOT be pushed into stack. When tag is closed and stack-top is greater than 1, stentry item at top of stack WILL ...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2016:2775-1)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two NUL...