Export limit exceeded: 425979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2009-0790

openswan: ISAKMP DPD remote DoS

The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat Strongswan Xelerance
Products
Enterprise Linux Strongswan Openswan
CVE-2009-0791

xpdf: multiple integer overflows

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed
Vendors
Apple Redhat
Products
Cups Enterprise Linux
CVE-2009-0792

argyllcms: Incomplete fix for CVE-2009-0583

Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Argyllcms Ghostscript Redhat
Products
Argyllcms Ghostscript Enterprise Linux
CVE-2009-0793

lcms: Null pointer dereference (DoS) by handling transformations of monochrome profiles

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."

CVSS 2.0 · 4.3 Medium EPSS 4.8% KEV · Not listed
Vendors
Littlecms Redhat Sun
Products
Lcms Enterprise Linux Openjdk
CVE-2009-0799

PDF JBIG2 decoder OOB read

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.

CVSS 2.0 · 4.3 Medium EPSS 3.8% KEV · Not listed
Vendors
Apple Foolabs Glyphandcog and 2 more
Products
Cups Xpdf Xpdfreader and 2 more
CVE-2009-0800

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed
Vendors
Apple Foolabs Glyphandcog and 2 more
Products
Cups Xpdf Xpdfreader and 2 more
CVE-2009-0834

kernel: x86-64: syscall-audit: 32/64 syscall hole

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 12 more
CVE-2009-0844

krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.

CVSS 2.0 · 5.8 Medium EPSS 4.3% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux
CVE-2009-0845

krb5: NULL pointer dereference in GSSAPI SPNEGO (MITKRB5-SA-2009-001)

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.

CVSS 2.0 · 5.0 Medium EPSS 5.6% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos Kerberos 5 Enterprise Linux
CVE-2009-0846

krb5: ASN.1 decoder can free uninitialized pointer when decoding an invalid encoding (MITKRB5-SA-2009-002)

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

CVSS 2.0 · 10.0 Critical EPSS 8.9% KEV · Not listed
Vendors
Apple Canonical Fedoraproject and 2 more
Products
Mac Os X Ubuntu Linux Fedora and 6 more
CVE-2009-0922

postgresql: potential DoS due to conversion functions

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

CVSS 2.0 · 4.0 Medium EPSS 10.2% KEV · Not listed
Vendors
Postgresql Redhat
Products
Postgresql Enterprise Linux
CVE-2009-0945

kdegraphics: KSVG NULL-pointer dereference in the SVGList interface implementation (ACE)

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 9.3% KEV · Not listed
Vendors
Apple Microsoft Redhat
Products
Mac Os X Mac Os X Server Safari and 3 more
CVE-2009-0946

freetype: multiple integer overflows

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

CVSS 2.0 · 7.5 High EPSS 8.5% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Iphone Os Mac Os X Mac Os X Server and 7 more
CVE-2009-0949

cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

CVSS 3.1 · 7.5 High EPSS 19.6% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Cups Mac Os X Mac Os X Server and 5 more
CVE-2009-1044

Firefox XUL garbage collection issue (cansecwest pwn2own)

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed
Vendors
Microsoft Mozilla Redhat
Products
Windows 7 Firefox Enterprise Linux
CVE-2009-1072

kernel: nfsd should drop CAP_MKNOD for non-root

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 5 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 11 more
CVE-2009-1093

OpenJDK remote LDAP Denial-Of-Service (6717680)

LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 3 more
CVE-2009-1094

OpenJDK LDAP client remote code execution (6737315)

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.

CVSS 2.0 · 10.0 Critical EPSS 4.4% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 3 more
CVE-2009-1095

OpenJDK Pack200 Buffer overflow vulnerability (6792554)

Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 2 more
CVE-2009-1096

OpenJDK Pack200 Buffer overflow vulnerability (6792554)

Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 2 more