GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability (CNVD-2018-05202)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

VulnCheck KEV: CVE-2014-7187

Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via deeply nested for loops, aka the "wordlineno" issue...

UBUNTU-CVE-2018-7568

The parsedie function in dwarf1.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service integer overflow and application crash via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm...

PT-2018-2387

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30 Description The issue is related to an integer overflow in the parse die function, located in dwarf1.c, which can cause a denial of service application crash when processing an ELF file with corrupt dwarf1 debug...

PT-2018-6256

Name of the Vulnerable Software and Affected Versions: Ox gem version 2.8.1 Description: The issue is related to a stack-based buffer over-read in the read from str function in sax buf.c when a crafted input is supplied to sax parse. This can cause the process to crash. Recommendations: For Ox ge...

FreeXL heap buffer out-of-bounds read vulnerability (CNVD-2018-05153)

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A heap buffer out-of-bounds read vulnerability exists in the 'parseSST' function in versions of FreeXL prior to 1.0.5. An attacker can exploit this...

DEBIAN-CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

DEBIAN-CVE-2018-7437

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...

UBUNTU-CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

CVE-2018-7438

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

DEBIAN-CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

UBUNTU-CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

PT-2018-18071

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a memcpy call of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations For versio...

PT-2018-18070

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a pointer dereference of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations Fo...

PT-2018-18072

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the parse unicode string function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

UBUNTU-CVE-2017-18187

In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the sslparseclientpskidentity function in library/sslsrv.c...

PT-2018-6718

Name of the Vulnerable Software and Affected Versions: mbed TLS versions prior to 2.7.0 Description: The issue is related to a bounds-check bypass through an integer overflow in PSK identity parsing. This occurs in the ssl parse client psk identity function, located in library/ssl srv.c...

DEBIAN-CVE-2018-6872

The elfparsenotes function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service out-of-bounds read and segmentation violation via a note with a large alignment...

UBUNTU-CVE-2018-6872

The elfparsenotes function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service out-of-bounds read and segmentation violation via a note with a large alignment...

DEBIAN-CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...