Lucene search
+L

87 matches found

OSV
OSV
added 2020/12/04 3:15 p.m.20 views

CVE-2020-27770

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to...

5.5CVSS6.5AI score
SaveExploits0References3
OSV
OSV
added 2020/12/04 3:15 p.m.7 views

UBUNTU-CVE-2020-27770

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to...

5.5CVSS6.8AI score0.01133EPSS
SaveExploits1References5
Prion
Prion
added 2020/12/04 3:15 p.m.25 views

Design/Logic Flaw

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to...

4.3CVSS5.6AI score0.01133EPSS
SaveExploits1References3Affected Software2
CVE
CVE
added 2020/12/04 12:0 a.m.190 views

CVE-2020-27770

CVE-2020-27770 is an ImageMagick flaw caused by a missing check for a 0 value in replace_extent, which can let an offset p overflow in SubstituteString(), potentially impacting availability. Affected software: ImageMagick versions prior to 7.0.8-68. The connected security notes confirm the root c...

5.5CVSS5.9AI score0.01133EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2020/12/04 12:0 a.m.61 views

CVE-2020-27770

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to...

5.5CVSS6.2AI score0.01133EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2020/11/24 7:54 p.m.26 views

CVE-2020-27770

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick...

5.5CVSS3.6AI score0.01133EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2020/09/03 12:0 a.m.128 views

Unbreakable Enterprise kernel security update

4.1.12-124.42.3 - can: peakusb: pcanusbfd: Fix info-leaks to USB devices Tomas Bortoli Orabug: 31351221 CVE-2019-19535 - media: hdpvr: Fix an error handling path in hdpvrprobe Arvind Yadav Orabug: 31352053 CVE-2017-16644 - fs/binfmtmisc.c: do not allow offset overflow Thadeu Lima de Souza Cascard...

7.8CVSS0.3AI score0.03551EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/04/01 2:30 a.m.32 views

CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

7.8CVSS2.9AI score0.03666EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/03/31 9:5 p.m.13 views

wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

7.8CVSS6.8AI score0.03666EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.68 views

CentOS 6 : kernel (CESA-2019:2473)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS6.8AI score0.04521EPSS
SaveExploits5References5
Oracle linux
Oracle linux
added 2019/08/14 12:0 a.m.229 views

kernel security and bug fix update

2.6.32-754.18.2.OL6 - Update genkey bug 25599697 2.6.32-754.18.2 - x86 x86/speculation: Enable Spectre v1 swapgs mitigations Waiman Long 1724512 CVE-2019-1125 - x86 x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations Waiman Long 1724512 CVE-2019-1125 2.6.32-754.18.1 - virt xenbu...

7.8CVSS0.5AI score0.04521EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2019/08/13 3:18 p.m.273 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS7AI score0.04521EPSS
SaveExploits5References6
OSV
OSV
added 2018/07/19 2:29 a.m.5 views

UBUNTU-CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

7.5CVSS7.2AI score0.03666EPSS
SaveExploits0References5
OSV
OSV
added 2018/07/19 2:29 a.m.3 views

DEBIAN-CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

7.5CVSS7.5AI score0.03666EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/19 2:29 a.m.14 views

Integer overflow

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow...

7.8CVSS7.2AI score0.03666EPSS
SaveExploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2017/12/11 12:0 a.m.76 views

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3657 advisory. - mm: Tighten x86 /dev/mem with zeroing reads Kees Cook Orabug: 26675925 CVE-2017-7889 - more biomapuseriov leak fixes Al Viro Orabug: 27069042...

8.8CVSS7.5AI score0.16181EPSS
SaveExploits33References3
Oracle linux
Oracle linux
added 2017/12/07 12:0 a.m.90 views

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.20.1 - tty: Fix race in ptywrite leading to NULL deref Todd Vierling Orabug: 25392692 - ocfs2/dlm: ignore cleaning the migration mle that is inuse xuejiufei Orabug: 26479780 - KEYS: fix dereferencing NULL payload with nonzero length Eric Biggers Orabug: 26592025 - oracleasm:...

8.8CVSS8.6AI score0.16181EPSS
SaveExploits33
Oracle linux
Oracle linux
added 2017/10/24 12:0 a.m.87 views

Unbreakable Enterprise kernel security update

2.6.39-400.297.11 - mqueue: fix a use-after-free in sysmqnotify Cong Wang Orabug: 26643562 CVE-2017-11176 - ipv6: avoid overflow of offset in ip6find1stfragopt Sabrina Dubroca Orabug: 27011278 CVE-2017-7542 - packet: fix tpreserve race in packetsetring Willem de Bruijn Orabug: 27002453...

7.8CVSS7.4AI score0.03631EPSS
SaveExploits8
Prion
Prion
added 2010/08/11 8:0 p.m.18 views

Design/Logic Flaw

Citrix Online Plug-in for Windows for XenApp & XenDesktop before 11.2, Citrix Online Plug-in for Mac for XenApp & XenDesktop before 11.0, Citrix ICA Client for Linux before 11.100, Citrix ICA Client for Solaris before 8.63, and Citrix Receiver for Windows Mobile before 11.5 allow remote attackers...

9.3CVSS8.1AI score0.04921EPSS
SaveExploits0References4Affected Software5
securityvulns
securityvulns
added 2010/08/05 12:0 a.m.31 views

Heap Offset Overflow in Citrix ICA Clients

===============================ADVISORY=============================== Systems Affected: Citrix ICA Client Severity: High Category: Heap Offset Overflow Author: Context Information Security Ltd Reported to vendor: 20th February 2008 Advisory Issued: 4th August 2010...

8.5AI score
SaveExploits0
Rows per page
Query Builder