linux

CVEs (3,007)

• CVE-2017-9214CriMay 23, 2017
  Openvswitch

  Openvswitch
  risk 0.64cvss 9.8epss 0.03

  In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.

• CVE-2016-9843CriMay 23, 2017
  Zlib

  Zlib
  risk 0.64cvss 9.8epss 0.06

  The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.

• CVE-2016-9841CriMay 23, 2017
  Zlib

  Zlib
  risk 0.64cvss 9.8epss 0.07

  inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

• CVE-2016-5178CriMay 23, 2017
  Google

  Chrome
  risk 0.64cvss 9.8epss 0.02

  Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

• CVE-2017-2520CriMay 22, 2017
  Apple Inc.

  tvOS
  risk 0.64cvss 9.8epss 0.05

  An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code…

• CVE-2017-2519CriMay 22, 2017
  Apple Inc.

  tvOS
  risk 0.64cvss 9.8epss 0.04

  An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code…

• CVE-2017-2518CriMay 22, 2017
  Apple Inc.

  tvOS
  risk 0.64cvss 9.8epss 0.05

  An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code…

• CVE-2016-10243CriMay 2, 2017
  Fedoraproject

  Fedora
  risk 0.64cvss 9.8epss 0.07

  TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.

• CVE-2017-8105CriApr 24, 2017
  FreeType

  Freetype
  risk 0.64cvss 9.8epss 0.04

  FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.

• CVE-2017-7865CriApr 14, 2017
  FFmpeg

  Ffmpeg
  risk 0.64cvss 9.8epss 0.03

  FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.

• CVE-2017-7863CriApr 14, 2017
  FFmpeg

  Ffmpeg
  risk 0.64cvss 9.8epss 0.03

  FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.

• CVE-2015-6674CriApr 13, 2017
  Inspircd

  Inspircd
  risk 0.64cvss 9.8epss 0.02

  Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836.

• CVE-2014-5008CriMar 31, 2017
  Snoopy

  Snoopy
  risk 0.64cvss 9.8epss 0.04

  Snoopy allows remote attackers to execute arbitrary commands.

• CVE-2017-5511CriMar 24, 2017
  ImageMagick

  Imagemagick
  risk 0.64cvss 9.8epss 0.05

  coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.

• CVE-2017-5897CriMar 23, 2017
  Linux

  Kernel
  risk 0.64cvss 9.8epss 0.05

  The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.

• CVE-2017-5522CriMar 15, 2017
  MapServer

  Mapserver
  risk 0.64cvss 9.8epss 0.05

  Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

• CVE-2016-8863CriMar 7, 2017
  Pupnp

  libupnp
  risk 0.64cvss 9.8epss 0.08

  Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the…

• CVE-2016-7447CriFeb 6, 2017
  Graphicsmagick

  Graphicsmagick
  risk 0.64cvss 9.8epss 0.04

  Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.

• CVE-2016-7446CriFeb 6, 2017
  Graphicsmagick

  Graphicsmagick
  risk 0.64cvss 9.8epss 0.04

  Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.

• CVE-2017-5205CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().