1259 matches found
chromium-browser: Out of bounds memory access in PDFium
Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...
CVE-2018-11546
md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...
CVE-2018-11546
md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...
CVE-2018-11546
md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...
Wireshark Security Updates (May 2018) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
DEBIAN-CVE-2018-11360
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsmadtap.c by fixing an off-by-one error that caused a buffer overflow...
EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2018-1103)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impa...
SUSE SLED12 / SLES12 Security Update : zsh (SUSE-SU-2018:1072-1)
This update for zsh fixes the following issues : - CVE-2014-10070: environment variable injection could lead to local privilege escalation bnc1082885 - CVE-2014-10071: buffer overflow in exec.c could lead to denial of service. bnc1082977 - CVE-2014-10072: buffer overflow In utils.c when scanning...
Design/Logic Flaw
An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will...
CVE-2018-9860
An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will...
CVE-2018-9860
An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will...
openSUSE Security Update : ImageMagick (openSUSE-2018-343)
This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...
CVE-2016-10714
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...
CVE-2016-10714
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...
Code injection
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...
CVE-2016-10714
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...
CVE-2016-10714
CVE-2016-10714 affects zsh before 5.3, where an off-by-one error caused undersized buffers intended to support PATH_MAX characters. The resulting issue can cause a potential crash or instability due to buffer mis-sizing in path handling. Multiple connected sources reference this specific vulnerab...
MGASA-2017-0470 Updated glibc packages fix security vulnerabilities
The DNS stub resolver in the GNU C Library aka glibc or libc6 before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.CVE-2017-12132, CVE-2017-12133. The GNU C Library aka...