95 matches found
DEBIAN-CVE-2015-7513
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...
DEBIAN-CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
Samba Denial of Service Vulnerability (CNVD-2015-08517)
Samba is a set of programs that implement the SMB Server Messages Block protocol, cross-platform file sharing and print sharing services. A denial of service vulnerability exists in Samba versions 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3. Due to the incorrect handling of...
Updated avidemux packages fix security vulnerabilities
Updated avidemux packages fix security vulnerabilities: The mjpegdecodeapp function in libavcodec/mjpegdec.c in FFMpeg before 1.2.11 allows remote attackers to cause a denial of service out-of-bounds heap access and possibly have other unspecified impact via vectors related to LJIF tags in an MJP...
UBUNTU-CVE-2014-0142
QEMU, possibly before 2.0.0, allows local users to cause a denial of service divide-by-zero error and crash via a zero value in the 1 tracks field to the seektosector function in block/parallels.c or 2 extentsize field in the bochs function in block/bochs.c...
CVE-2014-0142
QEMU, possibly before 2.0.0, allows local users to cause a denial of service divide-by-zero error and crash via a zero value in the 1 tracks field to the seektosector function in block/parallels.c or 2 extentsize field in the bochs function in block/bochs.c...
CVE-2012-6053
epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 relies on a length field to calculate an offset value, which allows remote attackers to cause a denial of service infinite loop via a zero value for this field...
CVE-2012-0259
The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service crash via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read...
kernel: inet_diag: insufficient validation
The inetdiagbcaudit function in net/ipv4/inetdiag.c in the Linux kernel before 2.6.39.3 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service kernel infinite loop via crafted INETDIAGREQBYTECODE instructions in a netlink message, as demonstrated by an...
PT-2010-3673 · Sblim · Sblim-Sfcb
Name of the Vulnerable Software and Affected Versions: SBLIM SFCB versions 1.3.4 through 1.3.7 Description: The issue is related to an integer overflow in the httpAdapter.c component of SBLIM SFCB. This occurs when the configuration sets httpMaxContentLength to a zero value, allowing remote...
DEBIAN-CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
CVE-2008-5823
An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host WSH on Windows Vista, allows remote attackers to cause a denial of service access violation and application crash via a zero value for the Startup property...
CVE-2008-5823
CVE-2008-5823 describes a denial-of-service vulnerability in Microsoft Money 2006 related to an ActiveX control (prtstb06.dll). When the control is used with Windows Script Host/WScript on Windows Vista, supplying a zero Startup property value can trigger an access violation and crash the applica...
DEBIAN-CVE-2008-2696
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...
CVE-2008-1419
Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...