ALPINE-CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

DEBIAN-CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

DEBIAN-CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

ALPINE-CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

SUSE SLED12 / SLES12 Security Update : libevent (SUSE-SU-2018:0200-1)

This update for libevent fixes the following security issues : - CVE-2016-10195: DNS remote stack overread vulnerability bsc1022917 - CVE-2016-10196: stack/buffer overflow in evutilparsesockaddrport bsc1022918 - CVE-2016-10197: out-of-bounds read in searchmakenew bsc1022919 Note that Tenable...

The vulnerability of the sendto function in the software tool for interacting with servers via curl allows a hacker to trigger a service failure or redirect traffic.

The vulnerability of the sendto function in the curl programming interface relates to reading beyond the buffer limit when using the TFTP protocol. Exploiting this vulnerability allows a malicious actor to cause service failures or redirect traffic through a specially crafted URL address...

The vulnerability of the syntax analyzer of the software tool for interacting with the curl server allows a hacker to perform read operations beyond the buffer in memory.

The vulnerability of the software tool’s syntax analyzer for interacting with servers using curl is related to an error during registration on the server using the FTP protocol. Exploiting this vulnerability allows a malicious actor to gain access to data beyond the boundaries of the allocated...

PT-2018-3809 · Gnu +4 · Gnu Libcdio +4

Name of the Vulnerable Software and Affected Versions: GNU libcdio versions prior to 1.0.0 Description: The issue is related to a heap-based buffer over-read in the print iso9660 recurse function in iso-info.c. This could allow remote attackers to cause a denial of service or possibly have other...

The vulnerability of the ims_pcu_get_cdc_union_desc function (drivers/input/misc/ims-pcu.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the imspcugetcdcuniondesc function drivers/input/misc/ims-pcu.c in the Linux kernel arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker acting locally to cause service failures or other effects...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string. Remediation There is no fixed version for readstat. References - GitHub Issue...

DEBIAN-CVE-2018-5698

libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...

UBUNTU-CVE-2018-5698

libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...

DEBIAN-CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

UBUNTU-CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

PT-2018-17095 · R +1 · Haven R Package +2

Name of the Vulnerable Software and Affected Versions: haven R package affected versions not specified libreadstat.a in WizardMac ReadStat version 0.1.1 Description: The issue is related to multiple problems in the underlying ReadStat library of the haven R package, including an infinite loop...

The vulnerability of the xmlDictComputeFastKey function (dict.c) in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlDictComputeFastKey function in the dict.c file of the libxml2 library arises from a read operation that occurs outside the buffer, within dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the CInArchive::ReadFileItem method (Archive/Udf/UdfIn.cpp) in the p7zip archive tool allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the CInArchive::ReadFileItem method Archive/Udf/UdfIn.cpp in the p7zip archive tool is caused by the occurrence of read operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

The vulnerability of the aiff_read_chanmap function in the libsndfile library, which allows an attacker to compromise confidentiality, integrity, and accessibility of data.

The vulnerability of the aiffreadchanmap function in the aaiff.c file of the libsndfile library relates to accessing beyond the buffer memory boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...

UBUNTU-CVE-2017-9712

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlanhddcfg80211setie, a buffer over-read occurs...

Debian DSA-4080-1 : php7.0 - security update

Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language : - CVE-2017-11144 Denial of service in openssl extension due to incorrect return value check of OpenSSL sealing function - CVE-2017-11145 Out-of-bounds read in wddxdeserialize - CVE-2017-11628...