Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,631

Export CSV
CVE-2016-1951

nspr: Memory allocation issue related to PR_*printf functions

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.

CVSS 3.0 · 8.6 High EPSS 3.1% KEV · Not listed
Vendors
Mozilla
Products
Netscape Portable Runtime
CVE-2016-0773

postgresql: case insensitive range handling integer overflow leading to buffer overflow

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.

CVSS 3.0 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Canonical Debian Postgresql and 1 more
Products
Ubuntu Linux Debian Linux Postgresql and 3 more
CVE-2016-0740

python-pillow: Integer overflow resulting in buffer overflow when reading invalid tiff file

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Debian Python
Products
Debian Linux Pillow
CVE-2015-8933

libarchive: Undefined behavior / signed integer overflow in TAR parser

Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Suse
Products
Ubuntu Linux Libarchive Linux Enterprise Desktop and 2 more
CVE-2015-8931

libarchive: Undefined behavior (signed integer overflow) in mtree parser

Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Libarchive and 2 more
Products
Ubuntu Linux Debian Linux Libarchive and 4 more
CVE-2015-8875

gdk-pixbuf: Integer overflows in various pixops functions

Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Debian Gnome
Products
Debian Linux Gdk-pixbuf
CVE-2015-8870

libtiff: Integer overflow in tools/bmp2tiff.c

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

CVSS 3.0 · 7.4 High EPSS 2.1% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2015-8836

fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

CVSS 3.0 · 7.3 High EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Fuseiso Project
Products
Fedora Fuseiso
CVE-2015-8830

kernel: AIO write triggers integer overflow in some protocols

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2015-8778

glibc: Integer overflow in hcreate and hcreate_r

Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.

CVSS 3.0 · 9.8 Critical EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2015-8080

redis: Integer wraparound in lua_struct.c causing stack-based buffer overflow

Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Debian Opensuse Redhat and 1 more
Products
Debian Linux Leap Opensuse and 3 more
CVE-2015-8078

cyrus-imapd: Integer overflow in index_urlfetch

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Cyrus Opensuse
Products
Imap Leap Opensuse
CVE-2015-8077

cyrus-imapd: Integer overflow in range checks

Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Cyrus Opensuse
Products
Imap Leap Opensuse
CVE-2015-8041

wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Opensuse W1.fi
Products
Opensuse Hostapd Wpa Supplicant
CVE-2014-0172

elfutils: integer overflow, leading to a heap-based buffer overflow in libdw

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Elfutils Project Redhat
Products
Elfutils Enterprise Linux
CVE-2014-0209

libXfont: integer overflow of allocations in font metadata file parsing

Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat X
Products
Ubuntu Linux Enterprise Linux Libxfont
CVE-2014-0222

Qemu: qcow1: validate L2 table size to avoid integer overflows

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Qemu Redhat Suse
Products
Qemu Enterprise Linux Openstack and 1 more
CVE-2014-0223

Qemu: qcow1: validate image size to avoid out-of-bounds memory access

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat Suse
Products
Qemu Enterprise Linux Openstack and 1 more
CVE-2014-0250

freerdp: integer overflows in memory allocations in client/X11/xf_graphics.c

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

CVSS 2.0 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Freerdp Opensuse
Products
Freerdp Opensuse