Enterprise Linux Server

CVEs (1,623)

• CVE-2016-9841CriMay 23, 2017
  Zlib

  Zlib
  risk 0.64cvss 9.8epss 0.07

  inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

• CVE-2017-5205CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().

• CVE-2017-5204CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.06

  The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().

• CVE-2017-5203CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

• CVE-2017-5202CriJan 28, 2017
  Tcpdump

  Tcpdump
  risk 0.64cvss 9.8epss 0.04

  The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

• CVE-2016-9636CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond…

• CVE-2016-9635CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond…

• CVE-2016-9634CriJan 27, 2017
  Gstreamer

  Gstreamer
  risk 0.64cvss 9.8epss 0.09

  Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.

• CVE-2014-8241CriDec 14, 2016
  Tigervnc

  Tigervnc
  risk 0.64cvss 9.8epss 0.03

  XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.

• CVE-2016-5408CriAug 10, 2016
  Red Hat

  squid
  risk 0.64cvss 9.8epss 0.04

  Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an…

• CVE-2016-4448CriJun 9, 2016
  Xmlsoft

  Libxml2
  risk 0.64cvss 9.8epss 0.07

  Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

• CVE-2016-0749CriJun 9, 2016
  Spice Project

  Spice
  risk 0.64cvss 9.8epss 0.08

  The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.

• CVE-2015-4601CriMay 16, 2016
  PHP

  PHP
  risk 0.64cvss 9.8epss 0.08

  PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a…

• CVE-2010-5325CriApr 15, 2016
  Foomatic

  foomatic-filters
  risk 0.64cvss 9.8epss 0.05

  Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

• CVE-2015-8391CriDec 2, 2015
  Pcre

  Pcre
  risk 0.64cvss 9.8epss 0.06

  The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript…

• CVE-2015-0192CriJul 2, 2015
  IBM

  Java
  risk 0.64cvss 9.8epss 0.05

  Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.

• CVE-2014-1532CriApr 30, 2014
  Mozilla Corporation

  Firefox
  risk 0.64cvss 9.8epss 0.05

  Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a…

• CVE-2014-1524CriApr 30, 2014
  Mozilla Corporation

  Firefox
  risk 0.64cvss 9.8epss 0.08

  The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or…

• CVE-2014-1514CriMar 19, 2014
  Mozilla Corporation

  Firefox
  risk 0.64cvss 9.8epss 0.06

  vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause…

• CVE-2014-1493CriMar 19, 2014
  Mozilla Corporation

  Firefox
  risk 0.64cvss 9.8epss 0.08

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly…