Lucene search
+L

7966 matches found

UbuntuCve
UbuntuCve
added 2019/01/08 11:29 p.m.28 views

CVE-2019-5721

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided...

5.5CVSS6.4AI score0.01477EPSS
SaveExploits1References4
OSV
OSV
added 2019/01/08 11:29 p.m.4 views

UBUNTU-CVE-2019-5721

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided...

5.5CVSS6.4AI score0.01477EPSS
SaveExploits1References5
Prion
Prion
added 2019/01/08 11:29 p.m.20 views

Design/Logic Flaw

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided...

4.3CVSS5.2AI score0.01477EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2019/01/08 11:00 p.m.305 views

CVE-2019-5721

Wireshark 2.4.0–2.4.11 contains a vulnerability in the ENIP dissector that could crash the process due to a use-after-free. The issue is caused by memory-management handling in epan/dissectors/packet-enip.c and is addressed by changing the memory-management approach to prevent use-after-free. Pub...

5.5CVSS5.4AI score0.01477EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2019/01/08 11:00 p.m.55 views

CVE-2019-5721

In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided...

5.5CVSS5.6AI score0.01477EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:00 a.m.13 views

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Discovery protocol in Cisco IOS and Cisco IOS XE operating systems is related to errors in memory management mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted packets...

7.4CVSS7.2AI score0.00583EPSS
SaveExploits0References4
NVD
NVD
added 2018/12/25 5:29 p.m.25 views

CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

8.8CVSS8.5AI score0.01479EPSS
SaveExploits1References2
OSV
OSV
added 2018/12/25 5:29 p.m.11 views

UBUNTU-CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

8.8CVSS7.3AI score0.01479EPSS
SaveExploits1References3
Prion
Prion
added 2018/12/25 5:29 p.m.20 views

Design/Logic Flaw

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

6.8CVSS8.9AI score0.01479EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2018/12/25 5:29 p.m.18 views

CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

8.8CVSS7.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 2018/12/25 5:00 p.m.32 views

CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

8.2AI score0.01479EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2018/12/25 5:00 p.m.42 views

CVE-2018-20452

The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, because of inconsistent memory management new versus free in ole2readheader in ole.c...

8.8CVSS9AI score0.01479EPSS
SaveExploits1
CVE
CVE
added 2018/12/25 5:00 p.m.71 views

CVE-2018-20452

CVE-2018-20452 affects libxls 1.4.0, where an invalid free in read_MSAT_body (and related memory handling in ole2_read_header in ole.c) can lead to a denial of service (application crash) or potentially other impact via crafted files. Multiple connected sources confirm the vulnerability resides i...

8.8CVSS8.4AI score0.01479EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/18 12:00 a.m.13 views

The vulnerability of the console-based graphic editor ImageMagick, related to improper memory management, allows a hacker to cause a system failure or execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to improper memory handling. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

6.5CVSS7AI score0.02366EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/12/08 4:29 a.m.6 views

UBUNTU-CVE-2018-19962

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones...

7.8CVSS7.2AI score0.0042EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2018/12/05 8:00 p.m.41 views

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

6.5AI score0.01849EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/12/04 12:00 a.m.31 views

RHEL 6 : Red Hat OpenShift Enterprise 2.2.8 (RHSA-2015:2666)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2666 advisory. OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

5CVSS6.6AI score0.04274EPSS
SaveExploits0References31
RedHat Linux
RedHat Linux
added 2018/11/13 5:52 p.m.6 views

kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact

The dogetmempolicy function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service DoS or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out...

7.8CVSS6.8AI score0.00445EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/10/30 12:31 p.m.10 views

kernel: Inifinite loop vulnerability in mm/madvise.c:madvise_willneed() function allows local denial of service

The madvisewillneed function in the Linux kernel allows local users to cause a denial of service infinite loop by triggering use of MADVISEWILLNEED for a DAX mapping...

5.5CVSS6.7AI score0.00479EPSS
SaveExploits0References6
NVD
NVD
added 2018/10/23 1:29 p.m.22 views

CVE-2017-18297

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820...

7.8CVSS6.9AI score0.00272EPSS
SaveExploits0References3
Rows per page
Query Builder