CVE-2014-2241

freetype: OOB stack-based read/write in cf2_hintmap_build()

The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed

Vendors

Canonical Freetype

Products

Ubuntu Linux Freetype

CVE-2014-5256

V8: Memory Corruption and Stack Overflow

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service (memory corruption and application crash) via deep JSON objects whose parsing lets this interrupt mask an overflow of the program stack.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Nodejs Redhat

Products

Nodejs Rhel Software Collections

CVE-2013-4290

openjpeg: multiple stack-based buffer overflows

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.

CVSS 2.0 · 10.0 Critical EPSS 3.0% KEV · Not listed

Vendors

Uclouvain

Products

Openjpeg

CVE-2014-6055

libvncserver: server stacked-based buffer overflow flaws in file transfer handling

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

CVSS 2.0 · 6.5 Medium EPSS 7.8% KEV · Not listed

Vendors

Debian Fedoraproject Libvncserver and 1 more

Products

Debian Linux Fedora Libvncserver and 4 more

CVE-2016-3191

pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

CVSS 3.0 · 9.8 Critical EPSS 8.4% KEV · Not listed

Vendors

Pcre Redhat

Products

Pcre Pcre2 Enterprise Linux and 1 more

CVE-2014-0004

udisks2: stack-based buffer overflow when handling long path names

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Freedesktop Redhat

Products

Ubuntu Linux Udisks Enterprise Linux

CVE-2014-0063

postgresql: stack-based buffer overflow in datetime input/output

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

CVSS 2.0 · 6.5 Medium EPSS 6.7% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Cloudforms Managementengine Enterprise Linux and 1 more

CVE-2014-4975

ruby: off-by-one stack-based buffer overflow in the encodes() function

Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 6 more

CVE-2014-8884

kernel: usb: buffer overflow in ttusb-dec

Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.

CVSS 2.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Eus

CVE-2014-9659

freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.

CVSS 2.0 · 7.5 High EPSS 7.7% KEV · Not listed

Vendors

Canonical Fedoraproject Freetype and 2 more

Products

Ubuntu Linux Fedora Freetype and 2 more

CVE-2014-9765

xdelta: buffer overflow in main_get_appheader

Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file.

CVSS 3.0 · 8.8 High EPSS 4.2% KEV · Not listed

Vendors

Canonical Debian Opensuse and 1 more

Products

Ubuntu Linux Debian Linux Opensuse and 1 more

CVE-2015-5158

Qemu: scsi stack buffer overflow

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance crash) via an invalid opcode in a SCSI command descriptor block.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2015-6806

screen: Stack overflow due to deep recursion causing process freeze

The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.

CVSS 2.0 · 5.0 Medium EPSS 4.1% KEV · Not listed

Vendors

Gnu

Products

Gnu Screen

CVE-2015-7547

glibc: getaddrinfo stack-based buffer overflow

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

CVSS 3.0 · 8.1 High EPSS 92.4% KEV · Not listed

Vendors

Canonical Debian F5 and 7 more

Products

Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 31 more

CVE-2016-1583

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 9 more

CVE-2016-2342

quagga: VPNv4 NLRI parser memcpys to stack on unchecked length

The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.

CVSS 3.0 · 8.1 High EPSS 13.3% KEV · Not listed

Vendors

Debian Quagga Redhat

Products

Debian Linux Quagga Enterprise Linux

CVE-2016-3186

libtiff: buffer overflow in gif2tiff

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.

CVSS 3.0 · 6.2 Medium EPSS 2.6% KEV · Not listed

Vendors

Libtiff Opensuse Redhat

Products

Libtiff Opensuse Enterprise Linux

CVE-2016-7415

icu: Stack based buffer overflow in locid.cpp

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.

CVSS 3.0 · 9.8 Critical EPSS 5.8% KEV · Not listed

Vendors

Icu-project

Products

International Components For Unicode

CVE-2016-7416

php: Stack based buffer overflow in msgfmt_format_message

ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.

CVSS 3.0 · 7.5 High EPSS 6.7% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2016-7170

Qemu: vmware_vga: OOB stack memory access when processing svga command

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Opensuse Qemu

Products

Debian Linux Leap Qemu