CVE-2016-9820: Undefined Security Weakness

libavcodec/mpegvideomotion.c in libav 11.8 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

PT-2017-10355

Name of the Vulnerable Software and Affected Versions libav version 11.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libavcodec/mpegvideo motion.c file...

PT-2017-10360

Name of the Vulnerable Software and Affected Versions libav version 11.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libswscale/utils.c file. Recommendations For...

PT-2017-16538

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving the left shift of a negative value in the libjasper/include/jasper/jas math.h...

PT-2017-16540

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving the left shift of a negative value in the libjasper/jpc/jpc dec.c file...

PT-2017-16542

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.17 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libjasper/jp2/jp2 dec.c file...

PT-2017-10361

Name of the Vulnerable Software and Affected Versions libav version 11.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libavcodec/ituh263dec.c file. Recommendations...

PT-2017-10354

Name of the Vulnerable Software and Affected Versions libav versions 11.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through vectors involving left shift of a negative value in the libavcodec/mpegvideo.c file. Recommendations...

Debian DLA-799-1 : ming security update

Multiple security issues have been found in Ming. They may lead to the execution of arbitrary code or causing application crash. CVE-2016-9264 global-buffer-overflow in printMP3Headers CVE-2016-9265 divide-by-zero in printMP3Headers CVE-2016-9266 left shift in listmp3.c CVE-2016-9827 listswf:...

The vulnerability of Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser is caused by numerical overflow or cyclic shift. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created PDF file, from a remote location...

CVE-2017-5498

libjasper/include/jasper/jasmath.h in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

openSUSE Security Update : zlib (openSUSE-2017-46)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 - Incompatible declarations for external...

DEBIAN-CVE-2016-1548

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...

CVE-2016-1548: Undefined Security Weakness

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...

SUSE-SU-2017:0004-1 Security update for zlib

This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for extern...

SUSE-SU-2017:0003-1 Security update for zlib

This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for external linkage...

SUSE SLES11 Security Update : zlib (SUSE-SU-2016:3209-1)

This update for zlib fixes the following issues : - Incompatible declarations for external linkage function deflate bnc1003577 - CVE-2016-9842: Undefined Left Shift of Negative Number bnc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bnc1003579 -...

SUSE-SU-2016:3209-1 Security update for zlib

This update for zlib fixes the following issues: Incompatible declarations for external linkage function deflate bnc1003577 CVE-2016-9842: Undefined Left Shift of Negative Number bnc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bnc1003579 CVE-2016-9843:...

openSUSE Security Update : zlib (openSUSE-2016-1499)

This update for zlib fixes the following issues : - Remove incompatible declarations of 'struct internalstate' boo1003577 - Avoid out-of-bounds pointer arithmetic in inftrees.c boo1003579, CVE-2016-9840, CVE-2016-9841 - Avoid left-shift with negative number boo1003580, CVE-2016-9842 - Avoid...

DEBIAN-CVE-2015-8932

The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...