linux

CVEs (3,015)

• CVE-2014-9112Dec 2, 2014
  GNU

  Cpio
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

• CVE-2014-5461Sep 4, 2014
  Lua

  Lua
  risk 0.01cvss —epss 0.12

  Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

• CVE-2014-3467Jun 5, 2014
  GNU

  Gnutls
  risk 0.01cvss —epss 0.07

  Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

• CVE-2014-2421Apr 16, 2014
  Sun Corporation

  Java SE
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

• CVE-2014-0457Apr 16, 2014
  Sun Corporation

  Java SE
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

• CVE-2014-0456Apr 16, 2014
  Sun Corporation

  Java SE
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

• CVE-2014-0429Apr 16, 2014
  Sun Corporation

  Java SE
  risk 0.01cvss —epss 0.08

  Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

• CVE-2013-6393Feb 6, 2014
  YAML

  Libyaml
  risk 0.01cvss —epss 0.09

  The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a…

• CVE-2013-4449Feb 5, 2014
  OpenLDAP

  Openldap
  risk 0.01cvss —epss 0.11

  The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while…

• CVE-2013-4559Nov 20, 2013
  Lighttpd

  Lighttpd
  risk 0.01cvss —epss 0.11

  lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function…

• CVE-2013-6629Nov 19, 2013
  Google

  Chrome
  risk 0.01cvss —epss 0.10

  The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of…

• CVE-2013-4475Nov 13, 2013
  Samba (software)

  Samba
  risk 0.01cvss —epss 0.09

  Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate…

• CVE-2013-4365Oct 17, 2013
  Apache

  Mod Fcgid
  risk 0.01cvss —epss 0.13

  Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors.

• CVE-2013-4243Sep 10, 2013
  LibTIFF

  Libtiff
  risk 0.01cvss —epss 0.08

  Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.

• CVE-2013-2070Jul 20, 2013
  Nginx

  Nginx
  risk 0.01cvss —epss 0.12

  http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted…

• CVE-2012-5829Nov 21, 2012
  Mozilla Corporation

  Firefox
  risk 0.01cvss —epss 0.08

  Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via…

• CVE-2012-4564Nov 11, 2012
  LibTIFF

  Libtiff
  risk 0.01cvss —epss 0.14

  ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based…

• CVE-2012-4188Oct 10, 2012
  Mozilla Corporation

  Firefox
  risk 0.01cvss —epss 0.15

  Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

• CVE-2012-4186Oct 10, 2012
  Mozilla Corporation

  Firefox
  risk 0.01cvss —epss 0.15

  Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via…

• CVE-2012-4180Oct 10, 2012
  Mozilla Corporation

  Firefox
  risk 0.01cvss —epss 0.09

  Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary…