EUVD-2016-1557

Malware in sbrugna...

The vulnerability of the queue_push function in the yodl package, which allows a perpetrator to compromise data confidentiality, integrity, and accessibility.

The vulnerability of the queuepush function in the yodl package occurs due to the operation being performed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

Yet Oneother Document Language has an unspecified vulnerability

Yet Oneother Document Language Yodl is a language conversion tool. A security vulnerability exists in the 'queuepush' function in the queue/queuepush.c file in versions of Yodl prior to 3.07.01. An attacker can exploit this vulnerability to cause an invalid memory read...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

Buffer overflow

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c...

CVE-2016-10375

Summary: CVE-2016-10375 affects yodl prior to 3.07.01 due to a buffer over-read in the queue_push.c function, which the connected sources describe as causing a potential Denial of Service. The issue is corroborated by Debian/DLA-2194-1 and Mageia MGASA-2017-0192 advisories, as well as OSV/OpenVAS...