1018 matches found
chicken -- multiple vulnerabilities
CHICKEN reports: CVE-2017-6949: Unchecked malloc call in SRFI-4 constructors when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault CVE-2017-9334: "length" crashes on improper lists CVE-2017-11343: The randomization factor of the symbol table was set before...
F5 Networks BIG-IP : OpenSSL vulnerability (K23873366)
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service integer overflow and application crash or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3srvr....
CVE-2016-8684
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."...
CVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...
DEBIAN-CVE-2016-9811
The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...
UBUNTU-CVE-2016-9811
The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...
MariaDB 10.0.0 < 10.0.29 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.29. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.29 advisory. - mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before...
PT-2016-3138 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to a missing malloc check in the coders/ipl.c component of ImageMagick, which can be exploited by remote attackers to have an unspecific impact. Recommendations: At...
UBUNTU-CVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...
CVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...
unsorted bin attack analysis-vulnerability warning-the black bar safety net
One, Foreword This is before that article overflow using the FILE structure of the follow-up article, mentioned earlier is for the Shanghai network security contest pwn450 of technology to write articles, a total of two techniques, one is the overflow using the FILE structure of the body, one is...
Null pointer dereference
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
CVE-2014-8241
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
CVE-2014-8241
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
DEBIAN-CVE-2014-8241
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
CVE-2014-8241
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
CVE-2014-8241: NULL Pointer Dereference
XRegion in TigerVNC allows remote VNC servers to cause a denial of service NULL pointer dereference by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052...
PT-2017-9857
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.11 Description The issue is related to the jas malloc function in libjasper/base/jas malloc.c, which can be triggered by a crafted file, leading to a memory allocation failure. This can allow remote attackers to...
Internet Bug Bounty: malloc negative size parameter
https://bugs.php.net/bug.php?id=73445 Thank you for your consideration...
The vulnerabilities of the library that handles system calls and the core functions of glibc allow a perpetrator to cause a service failure.
The multiple vulnerabilities in the malloc/malloc.c file of the library that provides system calls and core functions of glibc are caused by integer overflows. Exploiting these vulnerabilities can allow an attacker to trigger a service failure damage to dynamic memory by specifying an excessively...