Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists through an invalid free issue in image.cpp which causes the DoS attack...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a floating point exception in the Exiv2::ValueType function where a DoS attack would occur...

Denial Of Service (DoS) Through Null Pointer Dereference

libexiv2.so is vulnerable to denial of service DoS through null-pointer dereference attacks. The vulnerability exists in Exiv2::Image::printIFDStructure of image.cpp where a null-pointer dereference was possible leading to a DoS attack...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory dereference attacks. The vulnerability exists in Exiv2::getULong in types.cpp where parsing an image with invalid exif values would cause a denial of service DoS...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

Denial Of Service (DoS)

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the DecodeHeader function in io-ico.c to cause a out-of-bounds read that can crash the application...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflows. A malicious user can pass a jpg file to the LoaderTiff::getData function in preview.cpp to cause a buffer overflow that can crash the application or execute arbitrary code...

Remote Code Execution (RCE)

libxml2.so is vulnerable to remote code execution RCE attacks. The application does not forbid namespace nodes in XPointer ranges, allowing a malicious user to inject and execute arbitrary code...

Denial Of Service (DoS)

libtasn1.so is vulnerable to denial of service DoS. The attack exists because it allows a two-byte stack overflow while decoding DER encoded data in asn1derdecoding, leading to the DoS attack and possibly other attacks...

Container Check Bypass

libkrb5.so is vulnerable to checking bypass. It can be done when an authenticated kadmin user with permissions to add principals to an LDAP Kerberos database provides both a linkdn and containerd database argument, or by providing a DN string which is a left extension of a container DN string but...

Heap overflow

DISPUTED TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

CVE-2018-11210

TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS attacks. A malicious user can pass a XML file to the htmlParseName function in HTMLparser.c to cause a buffer overread that can crash the application...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. An attacker can make a Exiv2::Internal::PngChunk::parseTXTChunk call to trigger a heap-based buffer over-read...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. An incorrect Safe::add call triggered in readMetadata of jp2image.cpp can lead to DoS...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. Passing a large size value to the application causes a SIGABRT signal during the Exiv2::Internal::PngChunk::zlibUncompress function call through types.cpp, leading to the application crashing...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service DoS attacks. The library contains a use-after-free bug in the fctxstoptimer function in the lib/dns/resolver.c file, allowing a malicious user to pass a DNS packet to cause an assertion failure and crash the application...