7373 matches found
CVE-2018-13139
A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave...
CVE-2018-13139
A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave...
CVE-2018-13139
CVE-2018-13139 describes a stack-based buffer overflow in the psf_memset function of common.c in libsndfile 1.0.28. The vulnerability can be triggered by the sndfile-deinterleave executable and may allow a remote attacker to cause a denial of service (application crash) or possibly other impact v...
Scientific Linux Security Update : zsh on SL6.x i386/x86_64 (20180619)
Security Fixes : - zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 - zsh: buffer overflow when scanning very long directory paths for symbolic links CVE-2014-10072 - zsh: buffer overrun in symlinks CVE-2017-18206 - zsh: buffer overflow in utils.c:checkmailpath can...
CVE-2018-5874
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Stack overflow
An issue was discovered in jpeg-compressor 0.1. The buildhuffman function in stbimage.c allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...
CVE-2018-13030
An issue was discovered in jpeg-compressor 0.1. The buildhuffman function in stbimage.c allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...
CVE-2018-13030
An issue was discovered in jpeg-compressor 0.1. The buildhuffman function in stbimage.c allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...
CVE-2018-13030
The CVE-2018-13030 entry concerns jpeg-compressor 0.1, specifically the build_huffman function in stb_image.c. The vulnerability allows remote attackers to trigger a denial of service via a stack-based buffer overflow, potentially causing an application crash and other unspecified impacts. The av...
SUSE SLES11 Security Update : tiff (SUSE-SU-2018:1835-1)
This update for tiff fixes the following security issues : - CVE-2017-5225: Prevent heap buffer overflow in the tools/tiffcp that could have caused DoS or code execution via a crafted BitsPerSample value bsc1019611 - CVE-2018-7456: Prevent a NULL pointer dereference in the function...
EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1166)
According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution...
Delta Industrial Automation COMMGR AHSIM_5x0 Simulator Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation COMMGR. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of TCP packets sent to the AHSIM 5x0 Simulator. The issu...
PoDoFo 0.9.5 - Buffer Overflow (PoC)
PoDoFo 0.9.5 - Buffer Overflow PoC Exploit Title: PoDoFo 0.9.5 - Stack-Based Buffer Overflow PoC Date: 25.06.2018 Software Link: https://sourceforge.net/projects/podofo/ Vuln Version: 0.9.5 CVE: cve-2018-8002 Vulnerability Details: https://bugzilla.redhat.com/showbug.cgi?id=1548930 Exploit Author...
Delta Industrial Automation COMMGR DVP Simulator Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation COMMGR. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of TCP packets sent to the DVP Simulator. The issue...
Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple php5 vulnerabilities (CVE-2016-6911, CVE-2016-8670)
Summary Multiple security vulnerabilities have been identified in php5 that is embedded in IBM FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2016-6911 DESCRIPTION: libgd2 - GD Graphics Library is vulnerable to a denial of service, caused by a missing check for...
Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple glibc vulnerabilities
Summary Multiple security vulnerabilities have been discovered in glibc that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2014-9761 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper...
Security Bulletin: Vulnerabilities in Qemu affect PowerKVM (Multiple Vulnerabilities)
Summary PowerKVM is affected by six vulnerabilities in Qemu. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5154 DESCRIPTION: QEMU is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the IDE subsystem while processing ATAPI commands. A...
Redis Integer Overflow and Stack-Based Buffer Overflow Vulnerabilities
Redis is prone to integer overflow and stack-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-11218
CVE-2018-11218 describes a memory corruption vulnerability in the Redis Lua subsystem’s cmsgpack handling, caused by stack-based buffer overflows. Affected Redis versions are before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2. Several connected sources reiter the issue as a Redis component ...
