linux

CVEs (3,007)

• CVE-2017-5204CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.06

  The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().

• CVE-2017-5203CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

• CVE-2017-5202CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

• CVE-2016-9636CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond…

• CVE-2016-9635CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond…

• CVE-2016-9634CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.

• CVE-2016-2090CriJan 13, 2017
  Libbsd

  libbsd
  risk 0.64cvss 9.8epss 0.03

  Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

• CVE-2016-9427CriDec 12, 2016
  Bdwgc

  bdwgc
  risk 0.64cvss 9.8epss 0.04

  Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.

• CVE-2016-7161CriOct 5, 2016
  QEMU

  Qemu
  risk 0.64cvss 9.8epss 0.06

  Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

• CVE-2016-1243CriOct 3, 2016
  Unadf Project

  Unadf
  risk 0.64cvss 9.8epss 0.05

  Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname.

• CVE-2016-4303CriSep 26, 2016
  Es

  Iperf3
  risk 0.64cvss 9.8epss 0.07

  The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.

• CVE-2016-5772CriAug 7, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.10

  Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted…

• CVE-2016-5770CriAug 7, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue…

• CVE-2016-4610CriJul 22, 2016
  Libxslt

  libxslt
  risk 0.64cvss 9.8epss 0.05

  libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact…

• CVE-2016-4609CriJul 22, 2016
  Apple Inc.

  iTunes
  risk 0.64cvss 9.8epss 0.05

  libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact…

• CVE-2016-5008CriJul 13, 2016
  Libvirt

  Libvirt
  risk 0.64cvss 9.8epss 0.04

  libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.

• CVE-2016-0749CriJun 9, 2016
  Spice Project

  Spice
  risk 0.64cvss 9.8epss 0.08

  The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.

• CVE-2015-7695CriJun 7, 2016
  Zend

  Framework
  risk 0.64cvss 9.8epss 0.03

  The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.

• CVE-2014-9746CriJun 7, 2016
  FreeType

  Freetype
  risk 0.64cvss 9.8epss 0.03

  The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values,…

• CVE-2016-4544CriMay 22, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.07

  The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact…