CVE-2018-6869

CVE-2018-6869 affects ZZIPlib 0.13.68 (zip.c: __zzip_parse_root_directory) where an uncontrolled memory allocation can crash the process, enabling a remote attacker to cause denial of service by processing a crafted ZIP file. The vulnerability is documented across multiple advisories (Debian DLA,...

CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

ZZIPlib '__zzip_parse_root_directory' function denial of service vulnerability

ZZIPlib is a set of lightweight file compression tools. A security vulnerability exists in the 'zzipparserootdirectory' function of the zzip/zip.c file in ZZIPlib version 0.13.68. A remote attacker can exploit this vulnerability to cause a denial of service uncontrolled memory allocation and cras...

CVE-2018-1000030

Removed by vendor...

CCN-lite Buffer Overflow Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A buffer overflow vulnerability exists in util/ccnl-common.c in versions of CCN-lite prior to 2.0.0. An attacker could exploit this vulnerability to cause a buffer overflow via incorrect...

Buffer overflow

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-12469

CVE-2017-12469 describes a buffer overflow in CCN-lite’s file util/ccnl-common.c affecting versions prior to 2.00 . The root cause is improper memory allocation, enabling context-dependent attackers to cause unspecified impact. Several connected sources corroborate: CCN-lite before 2.00 (and resp...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

CVE-2017-16913

Improper input validation in drivers/usb/usbip/stubrx.c:stubrecvcmdsubmit in the Linux kernel, when handling CMDSUBMIT packets, allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...

DEBIAN-CVE-2018-6551

The malloc implementation in the GNU C Library aka glibc or libc6, from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZEMAX and could return a pointer to a heap region that is smaller than requested, eventually...

Design/Logic Flaw

The "stubrecvcmdsubmit" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...

CVE-2017-16913

The "stubrecvcmdsubmit" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...

DEBIAN-CVE-2017-16913

The "stubrecvcmdsubmit" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...

CVE-2017-16913

The CVE-2017-16913 issue affects the Linux kernel USB/IP stack. Specifically, stub_recv_cmd_submit() in drivers/usb/usbip/stub_rx.c fails to validate CMD_SUBMIT packets, enabling a remote attacker to trigger a denial of service via arbitrary memory allocation. Affected kernel versions: before 4.1...

CVE-2017-16913

The "stubrecvcmdsubmit" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...