Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,222

Export CSV
CVE-2015-8668

libtiff: OOB read in bmp2tiff

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

CVSS 3.1 · 9.8 Critical EPSS 13.7% KEV · Not listed
Vendors
Libtiff Oracle Redhat
Products
Libtiff Linux Vm Server and 3 more
CVE-2015-8723

wireshark: 802.11 decryption crash (wnpa-sec-2015-42)

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

CVSS 3.0 · 5.5 Medium EPSS 4.7% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2015-8724

wireshark: 802.11 decryption crash (wnpa-sec-2015-42)

The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

CVSS 3.0 · 5.5 Medium EPSS 4.3% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2015-8733

wireshark: Sniffer file parser crash (wnpa-sec-2015-51)

The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2015-8806

libxml2: heap-buffer overread in dict.c

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Xmlsoft
Products
Ubuntu Linux Debian Linux Libxml2
CVE-2015-8836

fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

CVSS 3.0 · 7.3 High EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Fuseiso Project
Products
Fedora Fuseiso
CVE-2015-8863

jq: heap-buffer-overflow in tokenadd() function

Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Jq Project Opensuse Redhat
Products
Jq Leap Opensuse and 1 more
CVE-2016-1833

libxml2: Heap-based buffer overread in htmlCurrentChar

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2014-0133

nginx: heap-based buffer overflow in SPDY implementation

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

CVSS 2.0 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
F5 Opensuse
Products
Nginx Opensuse
CVE-2014-0172

elfutils: integer overflow, leading to a heap-based buffer overflow in libdw

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Elfutils Project Redhat
Products
Elfutils Enterprise Linux
CVE-2014-0467

mutt: heap-based buffer overflow when parsing certain headers

Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed
Vendors
Mutt Opensuse Redhat
Products
Mutt Opensuse Enterprise Linux
CVE-2014-1543

firefox: Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API (MFSA 2014-54)

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Mozilla
Products
Firefox
CVE-2014-2525

libyaml: heap-based buffer overflow when parsing URLs

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.

CVSS 2.0 · 6.8 Medium EPSS 8.8% KEV · Not listed
Vendors
Opensuse Pyyaml Redhat
Products
Leap Opensuse Libyaml and 3 more
CVE-2014-3183

Kernel: HID: heap overflow due to lack of bounds checking

Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that specifies a large report size for an LED report.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2014-3461

Qemu: usb: fix up post load checks

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2014-3564

gpgme: heap-based buffer overflow in gpgsm status handler

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."

CVSS 2.0 · 6.8 Medium EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Gnu
Products
Ubuntu Linux Debian Linux Gpgme
CVE-2014-3618

procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."

CVSS 2.0 · 7.5 High EPSS 8.9% KEV · Not listed
Vendors
Canonical Procmail Redhat
Products
Ubuntu Linux Procmail Enterprise Linux
CVE-2014-3635

dbus: heap-based buffer overflow flaw in file descriptor passing

Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
D-bus Project Freedesktop Opensuse
Products
D-bus Dbus Opensuse
CVE-2014-7840

qemu: insufficient parameter validation during ram load

The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2014-7923

ICU: regexp engine missing look-behind expression range check

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more