Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. Heap-based buffer overflow in the parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service out-of-bounds write via a crafted plist file. Remediation Ther...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file. Remediation There is no fixed versi...

UBUNTU-CVE-2017-6435

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption via a crafted plist file...

DEBIAN-CVE-2017-6436

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

DEBIAN-CVE-2017-6435

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption via a crafted plist file...

DEBIAN-CVE-2017-6209

Stack-based buffer overflow in the parseidentifier function in tgsitext.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service out-of-bounds array access and QEMU process crash via vectors related to parsing...

CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

PT-2017-17067

Name of the Vulnerable Software and Affected Versions libplist version 1.12 Description The issue is related to a memory allocation error that can cause a denial of service. It is triggered by a crafted plist file, which affects the parse data node function in the bplist.c file of libimobiledevic...

PT-2017-16947

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a stack-based buffer overflow in the parse identifier function, located in the tgsi text.c file within the TGSI auxiliary module of the Gallium driver in virglrenderer...

PT-2017-17063

Name of the Vulnerable Software and Affected Versions libplist version 1.12 Description The issue is related to a memory allocation error that can cause a denial of service. It is triggered by a crafted plist file, which affects the parse string node function in the bplist.c file of the...

PT-2017-17062

Name of the Vulnerable Software and Affected Versions libplist version 1.12 Description The issue allows local users to cause a denial of service, specifically memory corruption, by utilizing a crafted plist file. This is due to a problem in the parse string node function in bplist.c...

PT-2017-17066

Name of the Vulnerable Software and Affected Versions libplist version 1.12 Description The issue is related to a heap-based buffer overflow in the parse string node function in bplist.c in libimobiledevice libplist. This can be exploited by local users via a crafted plist file, potentially leadi...

PT-2017-17065

Name of the Vulnerable Software and Affected Versions libplist version 1.12 Description The issue is related to a heap-based buffer overflow in the parse unicode node function in bplist.c in libimobiledevice libplist. This can be exploited by local users via a crafted plist file, potentially...

PT-2017-16588

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue allows local guest OS users to cause a denial of service, resulting in an out-of-bounds array access and process crash, via a crafted texture instruction. This is due to a problem in...

PT-2017-17396

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2 Description A boundary error within the parse tiff ifd function can be exploited to cause memory corruption via a specially crafted file, such as a KDC file with the model set to "DSLR-A100" and containing...

PT-2017-17395

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.2 Description The issue is related to an error within the parse tiff ifd function, located in internal/dcraw common.cpp, which can be exploited to corrupt memory. Recommendations For versions prior to 0.18.2, upda...

GNU Wget CRLF Injection Vulnerability (CNVD-2017-03817)

GNU Wget is a set of free software developed by the GNU Project for downloading over the Internet, which supports downloading over the three most common TCP/IP protocols: HTTP, HTTPS, and FTP. A CRLF injection vulnerability exists in the 'urlparse' function of the url.c file in GNU Wget 1.19.1 an...

DEBIAN-CVE-2017-6508

CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...

PT-2017-17121

Name of the Vulnerable Software and Affected Versions Wget versions prior to 1.19.2 Description A CRLF injection issue exists in the url parse function, allowing remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. Recommendations For versions...

UBUNTU-CVE-2017-6508

CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...