CVE-2017-17124

binutils: Heap buffer overflow in the _bfd_coff_read_string_table function

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-17095

libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 8.8 High EPSS 10.6% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2017-15804

glibc: Buffer overflow during unescaping of user names with the ~ operator

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed

Vendors

Gnu Redhat

Products

Glibc Enterprise Linux

CVE-2017-15670

glibc: Buffer overflow in glob with GLOB_TILDE

The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.

CVSS 3.0 · 9.8 Critical EPSS 3.0% KEV · Not listed

Vendors

Gnu Redhat

Products

Glibc Enterprise Linux

CVE-2017-15021

binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1

bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-15020

binutils: Heap-based buffer overflow in parse_die

dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-14976

poppler: Heap-based buffer over-read in the FoFiType1C::convertToType0 function

The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Debian Freedesktop

Products

Debian Linux Poppler

CVE-2017-14939

binutils: Heap-based buffer over-read in the decode_line_info

decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.

CVSS 3.0 · 5.5 Medium EPSS 5.9% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-14866

exiv2: Heap-based buffer overflow in the Exiv2::s2Data function

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-14865

exiv2: Heap-based buffer overflow in the Exiv2::us2Data function

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-14529

binutils: heap-based buffer over-read in bfd_getl16 function in peXXigen.c

The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Gnu

Products

Binutils

CVE-2017-14497

kernel: buffer overflow in tpacket_rcv() in net/packet/af_packet.c

The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux

Products

Debian Linux Linux Kernel

CVE-2017-14492

dnsmasq: heap overflow in the IPv6 router advertisement code

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

CVSS 3.0 · 9.8 Critical EPSS 94.5% KEV · Not listed

Vendors

Canonical Debian Novell and 2 more

Products

Ubuntu Linux Debian Linux Leap and 6 more

CVE-2017-14491

dnsmasq: heap overflow in the code responsible for building DNS replies

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.

CVSS 3.1 · 9.8 Critical EPSS 86.5% KEV · Not listed

Vendors

Arista Arubanetworks Canonical and 10 more

Products

Eos Arubaos Ubuntu Linux and 32 more

CVE-2017-14039

openjpeg: Heap-based buffer overflow in opj_t2_encode_packet function in lib/openjp2/t2.c

A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.

CVSS 3.1 · 8.8 High EPSS 4.4% KEV · Not listed

Vendors

Debian Uclouvain

Products

Debian Linux Openjpeg

CVE-2017-12983

ImageMagick: Heap-based buffer overflow in the ReadSFWImage function

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2017-12957

exiv2: Heap-based buffer over-read in Exiv2::Image::io function

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-12955

exiv2: Heap-based buffer overflow in basicio.cpp

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-12876

ImageMagick: Heap-based buffer overflow in enhance.c

Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2017-12862

opencv: Heap-based buffer over-write in modules/imgcodecs/src/grfmt_pxm.cpp

In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv