CVE-2015-1783

lasso: use of uninitialized value leading to a crash

The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed

Vendors

Entrouvert Fedoraproject

Products

Lasso Fedora

CVE-2016-8887

jasper: uninitialized pointer use in jp2_box_get()

The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Fedoraproject Jasper Project

Products

Fedora Jasper

CVE-2017-14991

kernel: Information leak in the scsi driver

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2017-5340

php: Use of uninitialized memory in unserialize()

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.

CVSS 3.1 · 9.8 Critical EPSS 16.7% KEV · Not listed

Vendors

Netapp Php Redhat

Products

Clustered Data Ontap Php Rhel Software Collections

CVE-2016-9436

w3m: Unitialised value in parsetagx.c

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Opensuse Opensuse Project Tats

Products

Leap Leap W3m

CVE-2017-9788

httpd: Uninitialized memory reflection in mod_auth_digest

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.

CVSS 3.0 · 9.1 Critical EPSS 56.8% KEV · Not listed

Vendors

Apache Apple Debian and 3 more

Products

Http Server Mac Os X Debian Linux and 15 more

CVE-2016-10250

jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Jasper Project

Products

Jasper

CVE-2016-7480

php: Use of uninitialized value in SplObjectStorag::unserialize

The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data.

CVSS 3.1 · 9.8 Critical EPSS 41.6% KEV · Not listed

Vendors

Netapp Php

Products

Clustered Data Ontap Php

CVE-2017-13715

kernel: Use of uninitialized value in __skb_flow_dissect()

The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.

CVSS 3.1 · 9.8 Critical EPSS 9.7% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2016-9435

w3m: Unitialised value in file.c

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Opensuse Opensuse Project Tats

Products

Leap Leap W3m

CVE-2017-6345

kernel: llc: skb->sk set without skb->destructor

The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2015-7837

kernel: securelevel disabled after kexec

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server Aus and 4 more

CVE-2017-9098

ImageMagick: use of uninitialized memory in RLE decoder

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed

Vendors

Debian Graphicsmagick Imagemagick

Products

Debian Linux Graphicsmagick Imagemagick

CVE-2014-7942

chromium-browser: uninitialized-value in Fonts

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Canonical Chromium Google and 2 more

Products

Ubuntu Linux Chromium Chrome and 6 more

CVE-2015-1227

chromium-browser: Uninitialized value in blink

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1228

chromium-browser: Uninitialized value in rendering

The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1259

chromium-browser: Uninitialized value in PDFium.

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1262

chromium-browser: Uninitialized value in Blink.

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-3414

sqlite: use of uninitialized memory when parsing collation sequences in src/where.c

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Mac Os X Watchos Ubuntu Linux and 4 more

CVE-2015-7872

kernel: Keyrings crash triggerable by unprivileged user

The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more