PT-2018-3396

Name of the Vulnerable Software and Affected Versions: ZZIPlib version 0.13.68 Description: The issue is related to an uncontrolled memory allocation in the zzip parse root directory function, which can cause a crash. This can be exploited by remote attackers to cause a denial of service using a...

CCN-lite 'cnb_parse_lev' Function Denial of Service Vulnerability

CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the 'cnbparselev' function in CCN-lite versions prior to 2.00. An attacker could exploit this vulnerability to cause an invalid read...

UBUNTU-CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CCN-lite Integer Overflow Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An integer overflow vulnerability exists in the ndnparsesequence function in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause an integer overflow via...

CCN-lite integer overflow vulnerability (CNVD-2018-03678)

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An integer overflow vulnerability exists in CCN-lite versions prior to 2.0.0. An attacker can exploit this vulnerability to cause an integer overflow by involving the vallen variable in th...

CVE-2017-12471

The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...

PT-2018-5410

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to the cnb parse lev function, which fails to check for out-of-bounds conditions. This failure triggers an invalid read in the hexdump function, allowing context-dependent...

PT-2018-5404

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue involves multiple integer overflows that can be exploited by context-dependent attackers. The overflows occur in the iottlv parse sequence function, which involves the vallen variable, an...

PT-2018-5409

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: The issue is related to an integer overflow in the ndn parse sequence function, allowing context-dependent attackers to have an unspecified impact. This is achieved via vectors involving the typ an...

DEBIAN-CVE-2018-6767

A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file...

rsync 'parse_arguments' function protection mechanism bypass vulnerability

rsync is a suite of data mirroring backup applications for Unix-like systems developed by Australian software developers Andrew Tridgell and Paul Mackerras, which synchronizes the updating of files and directories between two computers and reduces data transfers by using differential encoding...

The vulnerability of the parse_hid_report_descriptor function (drivers/input/tablet/gtco.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

UBUNTU-CVE-2018-5764

The parsearguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism...

PT-2018-1905 · Rsync +3 · Rsync +3

Name of the Vulnerable Software and Affected Versions: rsync versions prior to 3.1.3 Description: The issue is related to the parse arguments function in options.c in rsyncd, which does not prevent multiple uses of the --protect-args parameter. This allows remote attackers to bypass an...

Artifex Software MuPDF 'pdf_parse_array' function infinite loop vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. An infinite loop vulnerability exists in the 'pdfparsearray' function of the pdf/pdf-parse.c file in MuPDF version 1.12.0. A remote attacker can exploit this vulnerability to cause a denial of service application...

UBUNTU-CVE-2018-5686

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file...

PT-2018-17083 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: MuPDF version 1.12.0 Description: The issue is related to an infinite loop vulnerability and application hang in the pdf parse array function, located in pdf/pdf-parse.c, due to the failure to consider the End Of File EOF. This allows remote...

CVE-2017-13195

In the ihevcdparsesps function of ihevcdparseheaders.c, several parameter values could be negative which could lead to negative indexes which could lead to an infinite loop. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed...

CVE-2017-13197

In the ihevcdparseslice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1...

PT-2018-5497

Name of the Vulnerable Software and Affected Versions: Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to the ihevcd parse slice.c function, where slave threads are not joined in case of an error. This could lead to a remote denial of service of a critic...