EUVD-2016-1557

Malware in sbrugna...

yodl queue_push Use-After-Free

The vulnerability of the queuepush function in the yodl package occurs due to the operation being performed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

Yet Oneother Document Language has an unspecified vulnerability

Yet Oneother Document Language Yodl is a language conversion tool. A security vulnerability exists in the 'queuepush' function in the queue/queuepush.c file in versions of Yodl prior to 3.07.01. An attacker can exploit this vulnerability to cause an invalid memory read...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

Buffer overflow

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Summary: CVE-2016-10375 affects yodl prior to 3.07.01 due to a buffer over-read in the queue_push.c function, which the connected sources describe as causing a potential Denial of Service. The issue is corroborated by Debian/DLA-2194-1 and Mageia MGASA-2017-0192 advisories, as well as OSV/OpenVAS...

CVE-2016-10375: Improper Restriction of Operations within the Bounds of a Memory Buffer

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...