CVE-2014-9512

rsync: Transferring file outside destination path via just-sent symlink

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.

CVSS 2.0 · 6.4 Medium EPSS 6.5% KEV · Not listed

Vendors

Opensuse Oracle Samba

Products

Opensuse Solaris Rsync

CVE-2016-0616

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 13 more

CVE-2015-6242

wireshark: memory manager crash (wnpa-sec-2015-22)

The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed

Vendors

Oracle Wireshark

Products

Solaris Wireshark

CVE-2015-6241

wireshark: protocol tree crash (wnpa-sec-2015-21)

The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed

Vendors

Oracle Wireshark

Products

Solaris Wireshark

CVE-2014-9496

libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()

The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Libsndfile Project and 2 more

Products

Ubuntu Linux Debian Linux Libsndfile and 2 more

CVE-2015-5964

python-django: Denial-of-service possibility in logout() view by filling session store

The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 5.1% KEV · Not listed

Vendors

Canonical Djangoproject Oracle and 1 more

Products

Ubuntu Linux Django Solaris and 1 more

CVE-2015-5963

python-django: Denial-of-service possibility in logout() view by filling session store

contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to contrib.auth.views.logout, which triggers the creation of an empty session record.

CVSS 2.0 · 5.0 Medium EPSS 5.2% KEV · Not listed

Vendors

Canonical Djangoproject Oracle and 1 more

Products

Ubuntu Linux Django Solaris and 1 more

CVE-2015-6244

wireshark: ZigBee dissector crash (wnpa-sec-2015-24)

The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed

Vendors

Oracle Redhat Wireshark

Products

Linux Solaris Enterprise Linux and 1 more

CVE-2015-6245

wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)

epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed

Vendors

Oracle Redhat Wireshark

Products

Linux Solaris Enterprise Linux and 1 more

CVE-2015-6246

wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)

The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Oracle Redhat Wireshark

Products

Linux Solaris Enterprise Linux and 1 more

CVE-2014-8991

python-pip: local DoS vulnerability

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Oracle Pypa

Products

Solaris Pip

CVE-2015-6248

wireshark: Ptvcursor crash (wnpa-sec-2015-28)

The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Oracle Redhat Wireshark

Products

Linux Solaris Enterprise Linux and 1 more

CVE-2015-6249

wireshark: WCCP dissector crash (wnpa-sec-2015-29)

The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed

Vendors

Oracle Wireshark

Products

Solaris Wireshark

CVE-2015-7236

rpcbind: Use-after-free vulnerability in PMAP_CALLIT

Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.

CVSS 3.0 · 7.5 High EPSS 6.4% KEV · Not listed

Vendors

Canonical Debian Oracle and 2 more

Products

Ubuntu Linux Debian Linux Solaris and 2 more

CVE-2015-5295

openstack-heat: Vulnerability in Heat template validation leading to DoS

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.

CVSS 3.0 · 5.4 Medium EPSS 2.9% KEV · Not listed

Vendors

Fedoraproject Openstack Oracle and 1 more

Products

Fedora Orchestration Api Solaris and 1 more

CVE-2014-8964

pcre: incorrect handling of zero-repeat assertion conditions

Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.

CVSS 2.0 · 5.0 Medium EPSS 6.5% KEV · Not listed

Vendors

Fedoraproject Mariadb Opensuse and 3 more

Products

Fedora Mariadb Opensuse and 9 more

CVE-2015-8000

bind: responses with a malformed class attribute can trigger an assertion failure in db.c

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.

CVSS 2.0 · 5.0 Medium EPSS 55.9% KEV · Not listed

Vendors

Isc Oracle Redhat

Products

Bind Linux Solaris and 4 more

CVE-2015-5144

Django: possible header injection due to validators accepting newlines in input

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed

Vendors

Canonical Debian Djangoproject and 1 more

Products

Ubuntu Linux Debian Linux Django and 1 more

CVE-2015-5143

Django: possible DoS by filling session store

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

CVSS 2.0 · 7.8 High EPSS 7.2% KEV · Not listed

Vendors

Canonical Debian Djangoproject and 2 more

Products

Ubuntu Linux Debian Linux Django and 2 more

CVE-2014-8768

tcpdump: denial of service in verbose mode using malformed Geonet payload

Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.

CVSS 2.0 · 5.0 Medium EPSS 19.8% KEV · Not listed

Vendors

Canonical Opensuse Oracle and 1 more

Products

Ubuntu Linux Opensuse Solaris and 1 more