ALPINE-CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

AZL-7380 CVE-2018-11439 affecting package taglib for versions less than 1.13.1-1

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

Remote Code Execution (RCE) Through Buffer Overread

libfontforge.so is vulnerable to remote code execution RCE0 attacks. A malicious user can pass a ttf file to the application to cause a buffer overread that can crash the application or allow arbitrary code to be executed...

Buffer Overread

libcurl.so is vulnerable to buffer overread attacks. The vulnerability exists due to the lack of bound checking to ensure that reads are unable to exceed the buffer...

Remote Code Execution (RCE) Through Buffer Overread

libfontforge.so is vulnerable to remote code execution RCE attacks. A malicious user can pass a ttf file that when parsed causes an out-of-bound error that can crash the application or cause arbitrary code to be executed...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10852)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'isfootnote' function in the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based...

DEBIAN-CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

DEBIAN-CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

UBUNTU-CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

DEBIAN-CVE-2018-11468

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

JerryScript heap buffer overread vulnerability (CNVD-2018-15379)

JerryScript is a lightweight JavaScript engine designed to run on very constrained devices such as microcontrollers. A heap buffer over-read vulnerability exists in the litreadcodeunitfromutf8 function in JerryScript 1.0 related to reparsecharclass in parser/regexp/re-parser.c. An attacker can...

The vulnerability of the ext4_valid_block_bitmap function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ext4validblockbitmap function fs/ext4/balloc.c in the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploitation of this vulnerability can allow a malicious actor to cause service failures by using a specially crafted version of the...

UBUNTU-CVE-2018-11418

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromutf8 function via a RegExp"\u0020" payload, related to reparsecharclass in parser/regexp/re-parser.c...

UBUNTU-CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

ALPINE-CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have...

DEBIAN-CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have...

Wireshark Buffer Over-Read Vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed network packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A buffer over-read...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3655-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3655-1 advisory. Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a...

DEBIAN-CVE-2018-11362

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character...

UBUNTU-CVE-2018-11362

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0' character...