Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,221

Export CSV
CVE-2017-11108

tcpdump: Heap buffer overflow in the EXTRACT_16BITS function

tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

CVSS 3.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-11111

nasm: Heap buffer overflow in the preproc.c

In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

CVSS 3.0 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-11335

libtiff: Heap-based buffer overflow in tiff2pdf

There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode function in tif_zip.c). A crafted input may lead to a remote denial of service attack or an arbitrary code execution attack.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-11339

exiv2: Heap-based buffer overflow in the Image::printIFDStructure

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Exiv2
Products
Exiv2
CVE-2017-11533

ImageMagick: Heap-buffer over-read in the WriteUILImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11535

ImageMagick: Heap-based buffer over-read in the WritePSImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11540

ImageMagick: Heap buffer over-read in the GetPixelIndex() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13090

GNU Wget: heap overflow in HTTP protocol handling

The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.

CVSS 3.0 · 8.8 High EPSS 36.6% KEV · Not listed
Vendors
Debian Gnu Redhat
Products
Debian Linux Wget Enterprise Linux
CVE-2017-14151

openjpeg: Heap-based buffer overflow in opj_mqc_flush in mqc.c

An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution.

CVSS 3.1 · 8.8 High EPSS 5.2% KEV · Not listed
Vendors
Debian Uclouvain
Products
Debian Linux Openjpeg
CVE-2017-14152

openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in cio.c

A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.

CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed
Vendors
Debian Uclouvain
Products
Debian Linux Openjpeg
CVE-2017-14164

openjpeg2: Heap-based buffer overflow in opj_write_bytes_LE

A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.

CVSS 3.1 · 8.8 High EPSS 5.4% KEV · Not listed
Vendors
Uclouvain
Products
Openjpeg
CVE-2017-14166

libarchive: Heap-based buffer over-read in the atol8 function

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2017-14224

ImageMagick: Heap-based buffer overflow in the WritePCXImage function

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

CVSS 3.0 · 8.8 High EPSS 4.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14226

libwpd: Heap-based buffer over-read in WPXTableList class

WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.

CVSS 3.1 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Libreoffice Libwpd
Products
Libreoffice Libwpd
CVE-2017-14248

ImageMagick: Heap-based buffer over-read in the SampleImage() function

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14348

libraw: Heap-based 1 byte buffer over-write in processCanonCameraInfo function in internal/dcraw_common.cpp

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Libraw
Products
Libraw
CVE-2017-17095

libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 8.8 High EPSS 10.6% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2017-17124

binutils: Heap buffer overflow in the _bfd_coff_read_string_table function

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2017-17785

gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17789

gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp