CVE-2017-13026

CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...

Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Memory Read Vulnerability

The Medfusion 4000 Wireless Syringe Infusion Pump is a syringe infusion pump deployed in healthcare and public health for delivering small doses of medication in acute care settings. A memory read vulnerability exists in the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, where a...

KLA11082 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, privilege escalation, spoof user interface, bypass security restrictions, obtain sensitive information and execute arbitrary code. Below is...

UBUNTU-CVE-2017-12601

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

CVE-2017-12142

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12142

CVE-2017-12142 affects ytnef 1.9.2, where an invalid memory read in SwapDWord (ytnef.c) allows a crafted file to cause a denial of service. The issue is documented across multiple sources (OSV, NVD, Nessus/NASL feeds) with Fedora’s update stream indicating ytnef-1.9.3 includes the fix. Remediatio...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11459

SAP TREX 7.10 allows remote attackers to 1 read arbitrary files via an fget command or 2 write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592...

CVE-2017-11325

An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php...

CVE-2017-11572

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts parsettf.c resulting in DoS or code execution via a crafted otf file...

FreeRADIUS 'fr_dhcp_decode_suboptions()' function buffer out-of-bounds read vulnerability security vulnerability

FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...

CVE-2017-9833

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of “../..” using the FILECAMERA variable sent by GET to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue e.g., a vulnerability on one type of camera because Boa does not include any...

CVE-2017-9130

The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder FAAC 1.28 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

MGASA-2017-0163 Updated zziplib packages fix security vulnerability

Heap-based buffer overflow in zzipget32 in fetch.c CVE-2017-5974. Heap-based buffer overflow in zzipget64 in fetch.c CVE-2017-5975. Heap-based buffer overflow in zzipmementryextrablock in memdisk.c CVE-2017-5976. Invalid memory read in zzipmementryextrablock in memdisk.c CVE-2017-5977. Out of...

SUSE-SU-2017:1504-1 Security update for yodl

This update for yodl fixes the following issues: - CVE-2016-10375: invalid memory read in the function queuepush could lead to Denial of service bsc1040917...

Debian DLA-976-1 : yodl security update

Hanno Bock discovered that there was a buffer over-read vulnerability in the yodl 'Your Own Document Language' document processor. For Debian 7 'Wheezy', this issue has been fixed in yodl version 3.00.0-6+deb7u1. We recommend that you upgrade your yodl packages. NOTE: Tenable Network Security has...

The vulnerability of the sctp_sf_ootb function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the sctpsfootb function in the Linux kernel’s net/sctp/smstatefuns.c file allows for data to be read beyond the specified buffer. Exploiting this vulnerability can enable a malicious actor to cause service failures or exert other effects using specially crafted SCTP data...

CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard...

CVE-2017-8396

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that condu...