CVE-2016-5009

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

CVE-2016-5009

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

CVE-2016-5009

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

CVE-2016-5009: Improper Input Validation

The handlecommand function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service segmentation fault and ceph monitor crash via an 1 empty or 2 crafted prefix...

MGASA-2016-0247 Updated tcpreplay packages fixes CVE-2016-6160

Updated tcpreplay package fixes security vulnerability: The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and they occur on interfaces with an MTU of or close to 65536. For example, the loopback...

Updated tcpreplay packages fixes CVE-2016-6160

Updated tcpreplay package fixes security vulnerability: The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and they occur on interfaces with an MTU of or close to 65536. For example, the loopback...

PT-2017-8919

Name of the Vulnerable Software and Affected Versions tcpreplay versions prior to 4.1.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by sending a large frame. Recommendations For versions prior to 4.1.2, update to version 4.1.2 or...

Debian DLA-544-1 : tcpreplay security update

The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and such frames occur when caputuring packets on interfaces with an MTU of or close to 65536. For example, the loopback interface lo of the Linux...

[SECURITY] [DLA 544-1] tcpreplay security update

Package : tcpreplay Version : 3.4.3-2+wheezy2 CVE ID : CVE-2016-6160 Debian Bug : 829350 The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and such frames occur when caputuring packets on interfac...

DLA-544-1 tcpreplay - security update

Bulletin has no description...

librsvg2 out-of-bounds read vulnerability

librsvg2 is an SVG rendering engine written in C. It can be used to render a number of SVG files. An out-of-bounds read vulnerability exists in librsvg2. An attacker can exploit this vulnerability to cause an out-of-bounds read and segment error by sending the SIGSEGV signal...

Unspecified vulnerability in tcpreplay tcprewrite

tcpreplay is a suite of tools based on the UNIX operating system developed by software developer Aaron Turner for testing the traffic of various network devices. tcprewrite is one of the tools used to modify the headers of Layer 2, Layer 3, and Layer 4 messages of the network protocol. An...

Symantec AntiVirus - 'dec2lha Library' Remote Stack Buffer Overflow (PoC)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=814 The dec2lha library is the library responsible for decompressing LZH and LHA archives. The CSymLHA::getheader routine has a trivial stack buffer overflow. .text:00023D91 31 C0 xor eax, eax ... .text:00023DAE 8D 95 E4 FB FF+ lea...

openSUSE Security Update : libtasn1 (openSUSE-2016-773)

This update for libtasn1 fixes the following issues : - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER...

PInfo 0.6.9-5.1 - Local Buffer Overflow

Exploit for linux platform in category local exploits Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: An alternative info-file viewer pinfo is an viewer for Info documents, which is based on ncurse...

PInfo 0.6.9-5.1 - Local Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: PInfo - File viewer Version: 0.6.9-5.1 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: An alternative info-file...

Unspecified Vulnerability in ImageMagick DCM Parser

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A security vulnerability exists in the ReadDCMImage function in ImageMagick's DCM parser, which can be exploited by attackers to cause null pointer access and segmentation errors...

Internet Bug Bounty: Double Free Corruption in wddx.c (extension)

There are a bug double free occur in wddxdeserialize, which trying to deserialize malicious xml input from user's request. The problem start here in : static void phpwddxpushelementvoid userdata, const XMLChar name, const XMLChar atts ...snip..... else if !strcmpchar name, ELBOOLEAN int i; if att...

SUSE-SU-2016:1601-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER certificat...

SUSE-SU-2016:1600-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER certificat...