PT-2017-7753

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1 Description A buffer overflow issue exists in the git pkt parse line function in transports/smart pkt.c, which is part of the Git Smart Protocol support in libgit2. This...

PT-2016-4581

Name of the Vulnerable Software and Affected Versions libevent versions prior to 2.1.6-beta Description The issue is related to the name parse function in evdns.c, which allows remote attackers to have an unspecified impact via vectors involving the label len variable. This triggers an...

PT-2016-7513

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.5 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the gsm parse function in libavcodec/gsm parser.c. Recommendations For versions prior to...

BlueZ userland utilities vulnerable to buffer overflow

Overview BlueZ provides a Bluetooth protocol stack for Linux kernel and userland utilities. parseline function used in some userland utilities contains a buffer overflow vulnerability. Hiroki MATSUKUMA of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with...

PT-2016-3235

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.30 PHP versions 7.x prior to 7.0.15 Description The issue is related to a buffer over-read in the phar parse pharfile function in ext/phar/phar.c, which can be exploited by supplying malicious archive files. This coul...

HTTP Header Injection

excon is vulnerable to HTTP header injection vulnerability. It does not properly parse the path, allowing attackers to inject arbitrary headers in requests or even create a new evil request...

Information Disclosure

parse-server is vulnerable to information disclosures. A malicious user can view personal identifiable information when querying the database without authorization...

PT-2016-3324

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue is related to the gst aac parse sink setcaps function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service invali...

PT-2017-10344

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2 Description The issue is caused by an off-by-one error in the gst h264 parse set caps function, allowing remote attackers to have an unspecified impact via a crafted file. This triggers an out-of-bounds read...

PT-2019-7703

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.6 Description An issue was discovered in the Linux kernel. There is an out of bounds write in the ad5755 parse dt function. Recommendations For versions prior to 4.8.6, update to version 4.8.6 or later to...

PT-2017-9388

Name of the Vulnerable Software and Affected Versions BlueZ versions 5.41 and earlier Description A buffer overflow issue exists, allowing an attacker to execute arbitrary code via the parse line function used in some userland utilities. Recommendations For BlueZ versions 5.41 and earlier, at the...

DEBIAN-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

UBUNTU-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

ALPINE-CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

DEBIAN-CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

Stack overflow

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

UBUNTU-CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...