Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 73

Export CSV
CVE-2016-10165

lcms2: Out-of-bounds read in Type_MLU_Read()

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

CVSS 3.1 · 7.1 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Littlecms and 3 more
Products
Ubuntu Linux Debian Linux Little Cms Color Engine and 20 more
CVE-2017-7525

jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

CVSS 3.1 · 9.8 Critical EPSS 37.7% KEV · Not listed
Vendors
Debian Fasterxml Netapp and 2 more
Products
Debian Linux Jackson-databind Oncommand Balance and 27 more
CVE-2017-15095

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.

CVSS 3.1 · 9.8 Critical EPSS 8.4% KEV · Not listed
Vendors
Debian Fasterxml Netapp and 2 more
Products
Debian Linux Jackson-databind Oncommand Balance and 28 more
CVE-2016-9841

zlib: Out-of-bounds pointer arithmetic in inffast.c

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Iphone Os Mac Os X Tvos and 39 more
CVE-2016-3427

OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CVSS 3.1 · 9.8 Critical EPSS 92.3% KEV · Listed
Vendors
Apache Canonical Debian and 5 more
Products
Cassandra Ubuntu Linux Debian Linux and 39 more
CVE-2016-5195

kernel: mm: privilege escalation via MAP_PRIVATE COW breakage

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CVSS 3.1 · 7.0 High EPSS 83.5% KEV · Listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 21 more
CVE-2015-7848

ntp: multiple integer overflow read access violations

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.

CVSS 3.1 · 7.5 High EPSS 6.1% KEV · Not listed
Vendors
Netapp Ntp
Products
Clustered Data Ontap Data Ontap Operating In 7-mode Oncommand Balance and 3 more
CVE-2015-7705

ntp: denial of service by trigerring rate limiting on NTP server

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.

CVSS 3.1 · 9.8 Critical EPSS 12.2% KEV · Not listed
Vendors
Citrix Netapp Ntp and 1 more
Products
Xenserver Clustered Data Ontap Data Ontap and 7 more
CVE-2015-7701

ntp: slow memory leak in CRYPTO_ASSOC

Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2015-7853

ntp: reference clock memory corruption vulnerability

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

CVSS 3.1 · 9.8 Critical EPSS 11.8% KEV · Not listed
Vendors
Netapp Ntp
Products
Clustered Data Ontap Data Ontap Oncommand Balance and 3 more
CVE-2015-7854

ntp: password length memory corruption vulnerability

Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

CVSS 3.1 · 8.8 High EPSS 14.6% KEV · Not listed
Vendors
Netapp Ntp
Products
Clustered Data Ontap Data Ontap Oncommand Balance and 3 more
CVE-2015-7855

ntp: ASSERT in decodenetnum() on invalid values

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

CVSS 3.1 · 6.5 Medium EPSS 31.2% KEV · Not listed
Vendors
Debian Netapp Ntp and 1 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 8 more
CVE-2015-7852

ntp: ntpq atoascii memory corruption vulnerability

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

CVSS 3.1 · 5.9 Medium EPSS 12.3% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 12 more
CVE-2015-7850

ntp: remote configuration denial of service vulnerability

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

CVSS 3.1 · 6.5 Medium EPSS 5.6% KEV · Not listed
Vendors
Debian Netapp Ntp
Products
Debian Linux Clustered Data Ontap Data Ontap and 4 more
CVE-2015-7703

ntp: config command can be used to set the pidfile and drift file paths

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2015-7849

ntp: trusted keys memory corruption vulnerability

Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

CVSS 3.1 · 8.8 High EPSS 16.8% KEV · Not listed
Vendors
Netapp Ntp
Products
Clustered Data Ontap Data Ontap Oncommand Balance and 3 more
CVE-2016-2518

ntp: out-of-bounds references on crafted packet

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

CVSS 3.1 · 5.3 Medium EPSS 15.1% KEV · Not listed
Vendors
Debian Freebsd Netapp and 4 more
Products
Debian Linux Freebsd Clustered Data Ontap and 17 more
CVE-2015-7702

ntp: incomplete checks in ntp_crypto.c

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

CVSS 3.1 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more