CVE-2014-1303

webkitgtk: heap-based buffer overflow (WSA-2015-0001)

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 · 10.0 Critical EPSS 34.8% KEV · Not listed

Vendors

Apple

Products

Safari

CVE-2014-2525

libyaml: heap-based buffer overflow when parsing URLs

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

CVSS 2.0 · 6.8 Medium EPSS 8.8% KEV · Not listed

Vendors

Opensuse Pyyaml Redhat

Products

Leap Opensuse Libyaml and 3 more

CVE-2014-3183

Kernel: HID: heap overflow due to lack of bounds checking

Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that specifies a large report size for an LED report.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-3564

gpgme: heap-based buffer overflow in gpgsm status handler

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."

CVSS 2.0 · 6.8 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Gnu

Products

Ubuntu Linux Debian Linux Gpgme

CVE-2014-3618

procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."

CVSS 2.0 · 7.5 High EPSS 8.9% KEV · Not listed

Vendors

Canonical Procmail Redhat

Products

Ubuntu Linux Procmail Enterprise Linux

CVE-2014-3635

dbus: heap-based buffer overflow flaw in file descriptor passing

Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

D-bus Project Freedesktop Opensuse

Products

D-bus Dbus Opensuse

CVE-2014-3676

shim: heap-based buffer overflow flaw in IPv6 address parsing

Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."

CVSS 2.0 · 7.5 High EPSS 5.2% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Shim

CVE-2014-4049

php: heap-based buffer overflow in DNS TXT record parsing

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

CVSS 2.0 · 5.1 Medium EPSS 10.9% KEV · Not listed

Vendors

Debian Opensuse Php and 1 more

Products

Debian Linux Opensuse Php and 2 more

CVE-2014-5119

glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()

Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.

CVSS 2.0 · 7.5 High EPSS 17.0% KEV · Not listed

Vendors

Debian Gnu Redhat

Products

Debian Linux Glibc Enterprise Linux and 2 more

CVE-2015-6525

libevent: multiple integer overflows in the evbuffer APIs

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed

Vendors

Debian Libevent Project

Products

Debian Linux Libevent

CVE-2015-7497

libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey

Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-7498

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-7499

libxml2: Heap-based buffer overflow in xmlGROW

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed

Vendors

Apple Canonical Debian and 4 more

Products

Iphone Os Mac Os X Tvos and 14 more

CVE-2015-7500

libxml2: Heap buffer overflow in xmlParseMisc

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 12 more

CVE-2015-7512

Qemu: net: pcnet: buffer overflow in non-loopback mode

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

CVSS 3.1 · 9.0 Critical EPSS 7.7% KEV · Not listed

Vendors

Debian Oracle Qemu and 1 more

Products

Debian Linux Linux Qemu and 7 more

CVE-2015-7552

gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function

Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file.

CVSS 3.0 · 7.8 High EPSS 3.9% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux

CVE-2015-7555

giflib: Heap-based buffer overflow in giffix utility

Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Fedoraproject Giflib Project

Products

Fedora Giflib

CVE-2015-7557

librsvg2: Out-of-bounds heap read when parsing SVG file

The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Gnome

Products

Librsvg

CVE-2015-7673

gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

CVSS 2.0 · 6.8 Medium EPSS 5.4% KEV · Not listed

Vendors

Gnome Opensuse

Products

Gdk-pixbuf Opensuse

CVE-2015-7805

libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

CVSS 2.0 · 9.3 Critical EPSS 14.3% KEV · Not listed

Vendors

Mega-nerd Opensuse

Products

Libsndfile Opensuse