CVE-2016-2315

git: path_name() integer truncation and overflow leading to buffer overflow

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 17.3% KEV · Not listed

Vendors

Git-scm Opensuse Redhat and 1 more

Products

Git Leap Opensuse and 7 more

CVE-2016-1840

libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 13 more

CVE-2014-0133

nginx: heap-based buffer overflow in SPDY implementation

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

CVSS 2.0 · 7.5 High EPSS 9.5% KEV · Not listed

Vendors

F5 Opensuse

Products

Nginx Opensuse

CVE-2016-1838

libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal

The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVSS 3.0 · 5.5 Medium EPSS 7.0% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 13 more

CVE-2016-1833

libxml2: Heap-based buffer overread in htmlCurrentChar

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 13 more

CVE-2015-8868

poppler: heap buffer overflow in ExponentialFunction

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

CVSS 3.0 · 7.8 High EPSS 4.6% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 2 more

Products

Ubuntu Linux Debian Linux Fedora and 2 more

CVE-2015-8863

jq: heap-buffer-overflow in tokenadd() function

Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.3% KEV · Not listed

Vendors

Jq Project Opensuse Redhat

Products

Jq Leap Opensuse and 1 more

CVE-2015-8836

fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

CVSS 3.0 · 7.3 High EPSS 1.8% KEV · Not listed

Vendors

Fedoraproject Fuseiso Project

Products

Fedora Fuseiso

CVE-2015-8806

libxml2: heap-buffer overread in dict.c

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed

Vendors

Canonical Debian Xmlsoft

Products

Ubuntu Linux Debian Linux Libxml2

CVE-2015-8733

wireshark: Sniffer file parser crash (wnpa-sec-2015-51)

The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 4.1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2015-8724

wireshark: 802.11 decryption crash (wnpa-sec-2015-42)

The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

CVSS 3.0 · 5.5 Medium EPSS 4.3% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2015-8723

wireshark: 802.11 decryption crash (wnpa-sec-2015-42)

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

CVSS 3.0 · 5.5 Medium EPSS 4.7% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2015-8388

pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed

Vendors

Oracle Pcre Redhat

Products

Linux Perl Compatible Regular Expression Library Enterprise Linux and 1 more

CVE-2015-8384

pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Pcre Redhat

Products

Perl Compatible Regular Expression Library Rhel Software Collections

CVE-2015-7805

libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

CVSS 2.0 · 9.3 Critical EPSS 14.3% KEV · Not listed

Vendors

Mega-nerd Opensuse

Products

Libsndfile Opensuse

CVE-2015-7673

gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

CVSS 2.0 · 6.8 Medium EPSS 5.4% KEV · Not listed

Vendors

Gnome Opensuse

Products

Gdk-pixbuf Opensuse

CVE-2015-7183

nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Network Security Services Enterprise Linux and 3 more

CVE-2015-7182

nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.

CVSS 3.0 · 9.8 Critical EPSS 10.2% KEV · Not listed

Vendors

Mozilla Oracle Redhat

Products

Firefox Network Security Services Glassfish Server and 8 more

CVE-2015-6525

libevent: multiple integer overflows in the evbuffer APIs

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed

Vendors

Debian Libevent Project

Products

Debian Linux Libevent

CVE-2015-5523

tidy: heap buffer overflow in ParseValue()

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.

CVSS 2.0 · 4.3 Medium EPSS 3.8% KEV · Not listed

Vendors

Apple Canonical Debian and 1 more

Products

Iphone Os Mac Os X Watchos and 3 more