CVE-2010-4542

Gimp: Stack-based buffer overflow in Gfig plug-in

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed

Vendors

Gimp Redhat

Products

Gimp Enterprise Linux

CVE-2014-0978

graphviz: stack-based buffer overflow in yyerror()

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Graphviz

Products

Graphviz

CVE-2009-4274

netpbm: Stack-based buffer overflow by processing X PixMap image header fields

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed

Vendors

Netpbm Redhat

Products

Netpbm Enterprise Linux

CVE-2010-2221

scsi-target-utils: stack buffer overflow vulnerability

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed

Vendors

Arne Redlich \& Ross Walker Linux Redhat and 2 more

Products

Iscsitarget Linux Kernel Rhel Cluster Storage and 2 more

CVE-2011-1938

php: stack-based buffer overflow in socket_connect()

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

CVSS 2.0 · 7.5 High EPSS 23.1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux

CVE-2013-6462

libXfont: stack-based buffer overflow flaw when parsing Glyph Bitmap Distribution Format (BDF) fonts

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

CVSS 2.0 · 9.3 Critical EPSS 10.3% KEV · Not listed

Vendors

Redhat X

Products

Enterprise Linux Libxfont

CVE-2010-4015

PostgreSQL: Stack-based buffer overflow by processing certain tokens from SQL query string when intarray module enabled

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

CVSS 2.0 · 6.5 Medium EPSS 4.6% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux

CVE-2014-1236

graphviz: stack-based buffer overflow in chkNum()

Stack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via vectors related to a "badly formed number" and a "long digit list."

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed

Vendors

Graphviz

Products

Graphviz

CVE-2013-4588

Kernel: net: ipvs: stack buffer overflow

Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed

Vendors

Canonical Linux

Products

Ubuntu Linux Linux Kernel

CVE-2013-4473

poppler: stack-based buffer overflow in pdfseparate utility

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.

CVSS 2.0 · 7.5 High EPSS 7.1% KEV · Not listed

Vendors

Canonical Freedesktop

Products

Ubuntu Linux Poppler

CVE-2013-4458

glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed

Vendors

Gnu Redhat Suse

Products

Glibc Enterprise Linux Linux Enterprise Debuginfo and 1 more

CVE-2013-2004

libX11: unbounded recursion leading to stack-overflow

The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed

Vendors

Redhat X

Products

Enterprise Linux Libx11

CVE-2013-1961

(tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution

Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.

CVSS 2.0 · 9.3 Critical EPSS 5.9% KEV · Not listed

Vendors

Redhat Remotesensing

Products

Enterprise Linux Libtiff

CVE-2012-5965

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5964

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5963

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5962

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5961

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Libupnp Project

Products

Libupnp

CVE-2012-5960

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 32.6% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5959

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 75.8% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp