Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,221

Export CSV
CVE-2017-9610

ghostscript: Heap-buffer over-read in the xps_load_sfnt_name function

The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Artifex
Products
Ghostscript Ghostxps
CVE-2017-9041

binutils: Heap buffer overflow in the process_mips_specific function

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-9038

binutils: Heap-buffer overflow in the byte_get_little_endian

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-8363

libsndfile: Heap buffer over-read in the flac_buffer_copy function

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-8358

libreoffice: heap-based buffer overflow related to the ReadJPEG function

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Libreoffice
Products
Libreoffice
CVE-2017-8287

freetype: heap-based buffer overflow related to the t1_builder_close_contour function

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c.

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed
Vendors
Freetype
Products
Freetype
CVE-2017-8105

freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.

CVSS 3.0 · 9.8 Critical EPSS 4.4% KEV · Not listed
Vendors
Debian Freetype
Products
Debian Linux Freetype
CVE-2017-7668

httpd: ap_find_token() buffer overread

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.

CVSS 3.1 · 7.5 High EPSS 57.5% KEV · Not listed
Vendors
Apache Apple Debian and 3 more
Products
Http Server Mac Os X Debian Linux and 13 more
CVE-2017-7612

elfutils: Heap-buffer overflow in the check_sysv_hash function

The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Elfutils Project
Products
Ubuntu Linux Debian Linux Elfutils
CVE-2017-7611

elfutils: Heap-buffer overflow in the check_symtab_shndx function

The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Elfutils Project
Products
Ubuntu Linux Debian Linux Elfutils
CVE-2017-7608

elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Elfutils Project
Products
Ubuntu Linux Debian Linux Elfutils
CVE-2017-7607

elfutils: Heap-buffer overflow in the handle_gnu_hash function

The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Elfutils Project
Products
Elfutils
CVE-2017-7555

augeas: Improper handling of escaped strings leading to memory corruption

Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.

CVSS 3.0 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Augeas Redhat
Products
Augeas Enterprise Linux Rhel Aus and 2 more
CVE-2017-6965

binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-6834

audiofile: Heap-based buffer overflow in ulaw2linear_buf

Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6832

audiofile: Heap-based buffer overflow in MSADPCM::decodeBlock

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6831

audiofile: Heap-based buffer overflow in IMA::decodeBlockWAVE

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Audiofile Debian
Products
Audiofile Debian Linux
CVE-2017-6830

audiofile: Heap-based buffer overflow in alaw2linear_buf

Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Audiofile
Products
Audiofile
CVE-2017-6828

audiofile: Heap-based buffer overflow in readValue

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Audiofile
Products
Audiofile