linux

CVEs (3,015)

• CVE-2016-7799MedJan 18, 2017
  ImageMagick

  Imagemagick
  risk 0.43cvss 6.5epss 0.04

  MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

• CVE-2015-8916MedSep 20, 2016
  Libarchive

  Libarchive
  risk 0.43cvss 6.5epss 0.03

  bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.

• CVE-2016-6214MedAug 12, 2016
  Libgd

  Libgd
  risk 0.43cvss 6.5epss 0.03

  gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

• CVE-2016-6207MedAug 12, 2016
  Libgd

  Libgd
  risk 0.43cvss 6.5epss 0.06

  Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

• CVE-2016-6132MedAug 12, 2016
  Libgd

  Libgd
  risk 0.43cvss 6.5epss 0.03

  The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

• CVE-2016-3521MedJul 21, 2016
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.06

  Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

• CVE-2015-1547MedApr 13, 2016
  LibTIFF

  Libtiff
  risk 0.43cvss 6.5epss 0.03

  The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.

• CVE-2016-2191MedApr 13, 2016
  Optipng Project

  Optipng
  risk 0.43cvss 6.5epss 0.04

  The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

• CVE-2015-7560MedMar 13, 2016
  Samba (software)

  Samba
  risk 0.43cvss 6.5epss 0.13

  The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to…

• CVE-2016-2037MedFeb 22, 2016
  GNU

  Cpio
  risk 0.43cvss 6.5epss 0.05

  The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.

• CVE-2014-1523MedApr 30, 2014
  Mozilla Corporation

  Firefox
  risk 0.43cvss 6.5epss 0.03

  Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG…

• CVE-2011-2691MedJul 17, 2011
  Libpng

  Libpng
  risk 0.43cvss 6.5epss 0.04

  The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service…

• CVE-2011-2501MedJul 17, 2011
  Libpng

  Libpng
  risk 0.43cvss 6.5epss 0.03

  The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during…

• CVE-2026-49975HigJun 8, 2026
  Apache

  HTTP Server
  risk 0.42cvss 7.5epss 0.11

  Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

• CVE-2025-9086HigSep 12, 2025
  Curl

  Curl
  risk 0.42cvss 7.5epss 0.01

  1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname, but using clear text HTTP) using the same cookie set 3. The same cookie name is set - but with just a slash as path…

• CVE-2022-27782HigJun 2, 2022
  Curl

  Curl
  risk 0.42cvss 7.5epss 0.03

  libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However,…

• CVE-2022-27781HigJun 2, 2022
  Curl

  Curl
  risk 0.42cvss 7.5epss 0.02

  libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to…

• CVE-2019-8921MedNov 29, 2021
  Bluez

  Bluez
  risk 0.42cvss 6.5epss 0.01

  An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting…

• CVE-2021-22946HigSep 29, 2021
  Curl

  Curl
  risk 0.42cvss 7.5epss 0.04

  A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed…

• CVE-2017-17760MedDec 29, 2017
  Opencv

  Opencv
  risk 0.42cvss 6.5epss 0.02

  OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.