UBUNTU-CVE-2017-15022

dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the DWATname data type, which allows remote attackers to cause a denial of service bfdhashhash NULL pointer dereference, or out-of-bounds access, and application crash via a craft...

UBUNTU-CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

PT-2017-13598

Name of the Vulnerable Software and Affected Versions sam2p version 0.49.3 Description The issue is related to an invalid read of size 2 in the parse rgb function in in xpm.cpp, which can also lead to a write to an illegal address. Recommendations For sam2p version 0.49.3, at the moment, there is...

PT-2017-3151 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: The issue is related to the cdc parse cdc header function in drivers/usb/core/message.c, which allows local users to cause a denial of service, including out-of-bounds read and system crash, ...

PT-2017-13681

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.3.4 Description The issue is related to the handling of empty sprop-parameter-sets values in the sdp parse fmtp config h264 function, which can lead to a denial of service heap buffer overflow or possibly have other...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry function in XRef.cc via a crafted PDF document. Remediation A fix was pushed into the master branch but not yet published. References...

dlplibs: Index-out-of-bounds in WKS4Chart::sendCharts

Detailed report: https://oss-fuzz.com/testcase?key=5151574194126848 Project: dlplibs Fuzzer: libFuzzerdlplibswksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: WKS4Chart::sendCharts WKS4Parser::par...

ALPINE-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

DEBIAN-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

UBUNTU-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

DEBIAN-CVE-2017-12987

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

Tcpdump IEEE 802.11 parser buffer overflow vulnerability (CNVD-2017-27744)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IEEE 802.11 parser is one of the IEEE 802.11 standard parsers. A...

UBUNTU-CVE-2017-13008

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

PT-2017-12848

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IEEE 802.11 parser, specifically in the parse elements function within print-802 11.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12826

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IEEE 802.11 parser, specifically in the parse elements function within print-802 11.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12844

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the juniper parse header function within print-juniper.c. This affects the tcpdump protocol analyzer...

Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE

Nmap's XML result parse and NVD's CPE correlation to search CVE. You can use that to find public vulnerabilities in services... Nmap\s XML result parser and NVD's CPE correlation to search CVE Example: python vision2.py -f resultscan.xml -l 3 -o txt Coded by Mthbernades and CoolerVoid -...

PT-2017-3334

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.0 Description The issue is related to errors in resource management in the Media Framework component of the Android operating system, specifically in the ih264d parse bmb non direct cavlc function. This could all...

Gdk-Pixbuf tiff_image_parse function integer overflow vulnerability

Gdk-Pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability exists in the tiffimageparse function in Gdk-Pixbuf version 2.36.6. A remote attacker can exploit this vulnerability to execute code by sending a file or URL...

DEBIAN-CVE-2017-2870

An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability...