CVE-2010-0213

BIND: DoS (infinite loop of RRSIGs queries to authoritative servers) via certain RRSIG query

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.

CVSS 2.0 · 2.6 Low EPSS 6.5% KEV · Not listed

Vendors

Isc

Products

Bind

CVE-2010-0405

bzip2: integer overflow flaw in BZ2_decompress

Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.

CVSS 2.0 · 5.1 Medium EPSS 3.3% KEV · Not listed

Vendors

Bzip Libzip2 Redhat

Products

Bzip2 Libzip2 Enterprise Linux

CVE-2010-0733

postgresql: Integer overflow in hash table size calculation

Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.

CVSS 2.0 · 3.5 Low EPSS 6.8% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux

CVE-2010-0739

texlive: Integer overflow by processing special commands

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed

Vendors

Redhat Tug

Products

Enterprise Linux Tetex Tex Live

CVE-2010-0841

OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values, related to JPEGImageReader and "stepX".

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed

Vendors

Redhat Sun

Products

Network Satellite Rhel Extras Rhel Extras Sap and 3 more

CVE-2010-1411

libtiff: integer overflows leading to heap overflow in Fax3SetupState

Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 12.9% KEV · Not listed

Vendors

Apple Redhat

Products

Mac Os X Mac Os X Server Enterprise Linux

CVE-2010-1440

texlive: Integer overflow by processing special commands

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed

Vendors

Redhat Tug

Products

Enterprise Linux Tetex Tex Live

CVE-2010-1449

python: rgbimg: multiple security issues

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed

Vendors

Python Redhat

Products

Python Enterprise Linux

CVE-2010-1634

python: audioop: incorrect integer overflow checks

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed

Vendors

Canonical Fedoraproject Opensuse and 3 more

Products

Ubuntu Linux Fedora Opensuse and 3 more

CVE-2010-1640

AntiVirus: Off-by-one error (DoS, crash) by parsing a specially-crafted PE icon file

Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed

Vendors

Clamav

Products

Clamav

CVE-2010-2065

libtiff: TIFFroundup() integer overflow in TIFFFillStrip()

Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2010-2478

kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL

Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value that triggers a buffer overflow, a different vulnerability than CVE-2010-3084.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Suse

Products

Ubuntu Linux Linux Kernel Linux Enterprise Desktop and 1 more

CVE-2010-2497

freetype: integer underflow vulnerability

Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed

Vendors

Apple Debian Freetype

Products

Mac Os X Debian Linux Freetype

CVE-2010-2500

freetype: integer overflow vulnerability in smooth/ftgrays.c

Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.0% KEV · Not listed

Vendors

Apple Canonical Debian and 2 more

Products

Mac Os X Ubuntu Linux Debian Linux and 2 more

CVE-2010-2643

evince: Integer overflow in DVI file TFM font parser

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 6.0% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Evince

CVE-2010-2955

kernel: wireless: fix 64K kernel heap content leak via ioctl

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Opensuse and 2 more

Products

Ubuntu Linux Linux Kernel Opensuse and 5 more

CVE-2010-2959

kernel: can: add limit for nframes and clean up signed/unsigned variables

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

CVSS 2.0 · 7.2 High EPSS 3.7% KEV · Not listed

Vendors

Debian Fedoraproject Linux and 2 more

Products

Debian Linux Fedora Linux Kernel and 5 more

CVE-2010-3015

kernel: integer overflow in ext4_ext_get_blocks()

Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2010-3067

kernel: do_io_submit() infoleak

Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 3 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 7 more

CVE-2010-3081

kernel: 64-bit Compatibility Mode Stack Pointer Underflow

The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Not listed

Vendors

Linux Redhat Suse and 1 more

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 5 more