7540 matches found
CVE-2016-2090
The CVE-2016-2090 issue is in the libbsd library, specifically the fgetwln() function. An off-by-one condition in the memory reallocation path can trigger a heap-based buffer overflow in versions before 0.8.2. Several advisories (e.g., Gentoo GLSA-201607-13, Debian DLA-2052-1) note potential remo...
CVE-2016-9809
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
CVE-2016-9809
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
CVE-2016-2090: Improper Restriction of Operations within the Bounds of a Memory Buffer
Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow...
PT-2017-7996
Name of the Vulnerable Software and Affected Versions libbsd versions prior to 0.8.2 Description The issue is related to an off-by-one vulnerability in the fgetwln function, which can trigger a heap-based buffer overflow. This allows attackers to have an unspecified impact via unknown vectors...
CVE-2016-9809: Out-of-bounds Read
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...
Authentication flaw
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
CVE-2016-1547
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
DEBIAN-CVE-2016-1547
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
CVE-2016-1547
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
CVE-2016-1547
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
CVE-2016-1547
CVE-2016-1547 describes a denial-of-service vulnerability in ntpd where handling of crypto NAK packets can demobilize a preemptable client association. An off-path attacker can spoof a peer’s source and force the victim to drop synchronization, even with authentication enabled. The issue affects ...
CVE-2016-1547
Removed by vendor...
CVE-2016-1547: Improper Input Validation
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if...
gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps
An out-of-bounds heap read flaw was found in GStreamer's H.264 parser. A remote attacker could use this flaw to cause an application using GStreamer to crash...
libotr, Pidgin OTR: Remote execution of arbitrary code
Background Pidgin Off-the-Record OTR messaging allows you to have private conversations over instant messaging. libotr is a portable off-the-record messaging library. Description Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please review the CVE identifiers for more information...
CVE-2016-10094
Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image...
PT-2016-4578
Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is caused by an off-by-one error in the t2p readwrite pdf image tile function in tools/tiff2pdf.c. This error allows remote attackers to have an unspecified impact via a crafted image. Recommendation...