CVE-2014-9907

ImageMagick: DOS due to corrupted DDS files

coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2022-3807

Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2015-1774

libreoffice: HWP file filter vulnerability

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

CVSS 2.0 · 6.8 Medium EPSS 7.6% KEV · Not listed

Vendors

Apache Canonical Debian and 3 more

Products

Openoffice Ubuntu Linux Debian Linux and 6 more

CVE-2015-8035

libxml2: DoS caused by incorrect error detection during XZ decompression

The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

CVSS 2.0 · 2.6 Low EPSS 3.3% KEV · Not listed

Vendors

Apple Canonical Debian and 2 more

Products

Iphone Os Mac Os X Tvos and 7 more

CVE-2015-1803

libXfont: crash on invalid read in bdfReadCharacters

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more

CVE-2015-3294

dnsmasq: unchecked return value of the setup_reply() function

The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.

CVSS 2.0 · 6.4 Medium EPSS 5.0% KEV · Not listed

Vendors

Oracle Thekelleys

Products

Solaris Dnsmasq

CVE-2016-7417

php: Missing type check when unserializing SplArray

ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.

CVSS 3.0 · 9.8 Critical EPSS 6.8% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2010-2495

kernel: l2tp: Fix oops in pppol2tp_xmit

The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.

CVSS 2.0 · 10.0 Critical EPSS 2.9% KEV · Not listed

Vendors

Canonical Linux Suse

Products

Ubuntu Linux Linux Kernel Suse Linux Enterprise Desktop and 2 more

CVE-2014-0022

yum: yum-cron installs unsigned packages

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Baseurl Redhat

Products

Yum Enterprise Linux

CVE-2009-3245

openssl: missing bn_wexpand return value checks

OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed

Vendors

Openssl Redhat

Products

Openssl Enterprise Linux Jboss Enterprise Web Server

CVE-2010-0211

openldap: modrdn processing uninitialized pointer free

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

CVSS 3.1 · 9.8 Critical EPSS 28.5% KEV · Not listed

Vendors

Apple Openldap Opensuse and 2 more

Products

Mac Os X Mac Os X Server Openldap and 3 more

CVE-2013-1995

libXi: Sign extension issues resulting in heap-based buffer overflow

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed

Vendors

Redhat X.org

Products

Enterprise Linux Libxi

CVE-2022-47024

vim: no check if the return value of XChangeGC() is NULL

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Redhat Vim

Products

Enterprise Linux Vim

CVE-2022-43763

Lack of checking preconditions in APROL

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Br-automation

Products

Industrial Automation Aprol

CVE-2022-43765

DoS in APROLs Tbase server

B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Br-automation

Products

Industrial Automation Aprol

CVE-2023-23003

kernel: missing check for return value of hashmap__new() in the function expr__ctx_new

In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2023-23004

kernel: incorrect check for error case in the malidp_check_pages_threshold

In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2023-23005

kernel: incorrect check for error case in the memory_tier_init

In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Suse

Products

Linux Kernel Linux Enterprise Server

CVE-2021-32845

Moby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` at `pci_vtrnd_notify` fails to check the return value of `vq_getchain`. This leads to `struct iovec iov;` being uninitialized and used to read memory in `len = (int) read(sc->vrsc_fd, iov.iov_base, iov.iov_len);` when an attacker is able to make `vq_getchain` fail. This issue may lead to a guest crashing the host causing a denial of service and, under certain circumstance, memory corruption. This issue is fixed in commit 41272a980197917df8e58ff90642d14dec8fe948.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Mobyproject

Products

Hyperkit

CVE-2023-44182

Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations

An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web User Interfaces causes unintended effects such as demotion or elevation of privileges associated with an operators actions to occur. Multiple scenarios may occur; for example: privilege escalation over the device or another account, access to files that should not otherwise be accessible, files not being accessible where they should be accessible, code expected to run as non-root may run as root, and so forth. This issue affects: Juniper Networks Junos OS * All versions prior to 20.4R3-S7; * 21.1 versions prior to 21.1R3-S5; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S4; * 21.4 versions prior to 21.4R3-S3; * 22.1 versions prior to 22.1R3-S2; * 22.2 versions prior to 22.2R2-S2, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2. Juniper Networks Junos OS Evolved * All versions prior to 21.4R3-S3-EVO; * 22.1-EVO version 22.1R1-EVO and later versions prior to 22.2R2-S2-EVO, 22.2R3-EVO; * 22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Juniper

Products

Junos Junos Os Evolved