CVE-2014-0133

nginx: heap-based buffer overflow in SPDY implementation

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

CVSS 2.0 · 7.5 High EPSS 9.5% KEV · Not listed

Vendors

F5 Opensuse

Products

Nginx Opensuse

CVE-2014-9028

flac: Heap buffer write overflow in read_residual_partitioned_rice_

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVSS 2.0 · 7.5 High EPSS 9.9% KEV · Not listed

Vendors

Flac Redhat

Products

Libflac Enterprise Linux

CVE-2014-9029

jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 18.2% KEV · Not listed

Vendors

Jasper Project Redhat

Products

Jasper Enterprise Linux Rhev Manager

CVE-2014-9087

libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()

Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed

Vendors

Canonical Debian Gnupg and 1 more

Products

Ubuntu Linux Debian Linux Gnupg and 2 more

CVE-2013-6475

cups-filters: possible heap-based buffer overflows due to the use of gmalloc

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 3.2% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 1 more

Products

Ubuntu Linux Debian Linux Fedora and 1 more

CVE-2014-9674

freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows

The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed

Vendors

Canonical Fedoraproject Freetype and 3 more

Products

Ubuntu Linux Fedora Freetype and 9 more

CVE-2014-9705

php: heap buffer overflow in enchant_broker_request_dict()

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

CVSS 2.0 · 7.5 High EPSS 19.2% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections

CVE-2014-9728

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service (buffer over-read and system crash) via a crafted filesystem image, related to fs/udf/inode.c and fs/udf/symlink.c.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-9729

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a certain data-structure size consistency, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2014-9730

Kernel: fs: udf: heap overflow in __udf_adinicb_readpage

The udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on component lengths that are unused, which allows local users to cause a denial of service (system crash) via a crafted UDF filesystem image.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2015-0235

glibc: __nss_hostname_digits_dots() heap-based buffer overflow

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

CVSS 2.0 · 10.0 Critical EPSS 94.6% KEV · Not listed

Vendors

Apple Debian Gnu and 4 more

Products

Mac Os X Debian Linux Glibc and 19 more

CVE-2015-0805

Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Canonical Mozilla Opensuse

Products

Ubuntu Linux Firefox Opensuse

CVE-2015-0806

Mozilla: Memory corruption crashes in Off Main Thread Compositing (MFSA 2015-38)

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Canonical Mozilla Opensuse

Products

Ubuntu Linux Firefox Opensuse

CVE-2015-0814

Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 4.6% KEV · Not listed

Vendors

Mozilla

Products

Firefox

CVE-2015-1271

chromium-browser: Heap-buffer-overflow in pdfium

PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1273

chromium-browser: Heap-buffer-overflow in pdfium.

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1279

chromium-browser: Heap-buffer-overflow in pdfium.

Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1283

chromium-browser: Heap-buffer-overflow in expat.

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

CVSS 2.0 · 6.8 Medium EPSS 18.3% KEV · Not listed

Vendors

Canonical Debian Google and 6 more

Products

Ubuntu Linux Debian Linux Chrome and 11 more

CVE-2015-1472

glibc: heap buffer overflow in glibc swscanf

The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed

Vendors

Canonical Gnu Redhat

Products

Ubuntu Linux Glibc Enterprise Linux and 1 more

CVE-2015-1802

libXfont: missing range check in bdfReadProperties

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more