Lucene search
K

14 matches found

AlpineLinux
AlpineLinux
added 2022/08/10 8:15 p.m.47 views

CVE-2021-33644

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulongname, causing an out-of-bounds read...

8.1CVSS2.1AI score0.00225EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.25 views

EulerOS Virtualization 3.0.6.0 : cairo (EulerOS-SA-2020-1735)

According to the version of the cairo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because o...

7.5CVSS5.9AI score0.00358EPSS
Exploits1References2
Veracode
Veracode
added 2019/01/15 9:3 a.m.22 views

Denial Of Service (DoS)

xorg-x11-server is vulnerable to denial of service DoS attacks. The vulnerability exists as X.Org X Window System aka X11 and X X11R5 and X.Org Server aka xserver and xorg-server before 1.16.3, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc...

4.3CVSS7.1AI score0.04839EPSS
Exploits0References17Affected Software1
AlpineLinux
AlpineLinux
added 2018/04/29 3:0 p.m.31 views

CVE-2018-10538

An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytestocopy...

5.5CVSS6.1AI score0.00616EPSS
Exploits1
NVD
NVD
added 2017/11/17 9:29 a.m.12 views

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

5.5CVSS5.5AI score0.00189EPSS
Exploits0References1
ArchLinux
ArchLinux
added 2014/12/12 12:0 a.m.40 views

xorg-server: multiple issues

CVE-2014-8091 denial of service X.Org X Window System, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a crafted connection...

6.5CVSS6.2AI score0.04839EPSS
Exploits0References15
Prion
Prion
added 2014/12/10 3:59 p.m.21 views

Null pointer dereference

X.Org X Window System aka X11 and X X11R5 and X.Org Server aka xserver and xorg-server before 1.16.3, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service NULL pointer dereference a...

4.3CVSS7AI score0.04839EPSS
Exploits0References11Affected Software2
Oracle linux
Oracle linux
added 2013/11/04 12:0 a.m.22 views

gc security update

7.1-12 - Fix host triplets on x86 1014273 - Related: CVE-2012-2673 7.1-11 - Add sanity checking for calloc/malloc calls - Resolves: CVE-2012-2673...

5CVSS6.5AI score0.01653EPSS
Exploits1
Prion
Prion
added 2009/07/30 7:30 p.m.11 views

Cross site request forgery (csrf)

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

4.7CVSS6.5AI score0.003EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2009/07/30 7:30 p.m.9 views

CVE-2009-2649

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

4.7CVSS6.1AI score0.003EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2009/04/09 12:30 a.m.24 views

CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

4.3CVSS7.2AI score0.20287EPSS
Exploits1References2
NVD
NVD
added 2009/04/09 12:30 a.m.21 views

CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

4.3CVSS7.1AI score0.20287EPSS
Exploits1References38
Debian CVE
Debian CVE
added 2009/04/09 12:0 a.m.26 views

CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

4.3CVSS6AI score0.20287EPSS
Exploits1
Cvelist
Cvelist
added 2009/04/09 12:0 a.m.19 views

CVE-2009-0847

The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmeti...

7.1AI score0.20287EPSS
Exploits1References38
Rows per page
Query Builder