CVE-2015-5259

subversion: integer overflow in the svn:// protocol parser

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

CVSS 3.0 · 8.6 High EPSS 57.0% KEV · Not listed

Vendors

Apache

Products

Subversion

CVE-2015-5225

Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Qemu Redhat

Products

Fedora Qemu Enterprise Linux and 1 more

CVE-2015-5156

kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net

The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.

CVSS 2.0 · 6.1 Medium EPSS 1.0% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Extras Rt

CVE-2015-5073

pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.

CVSS 3.0 · 9.1 Critical EPSS 7.7% KEV · Not listed

Vendors

Ibm Pcre Redhat

Products

Powerkvm Pcre Enterprise Linux and 1 more

CVE-2015-4695

libwmf: heap buffer overread in meta.h

meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.

CVSS 2.0 · 5.0 Medium EPSS 6.6% KEV · Not listed

Vendors

Redhat Wvware

Products

Enterprise Linux Libwmf

CVE-2015-4588

libwmf: heap overflow within the RLE decoding of embedded BMP images

Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.

CVSS 2.0 · 6.8 Medium EPSS 9.2% KEV · Not listed

Vendors

Fedoraproject Opensuse Redhat and 1 more

Products

Fedora Opensuse Enterprise Linux and 1 more

CVE-2015-4491

Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

CVSS 2.0 · 6.8 Medium EPSS 8.4% KEV · Not listed

Vendors

Canonical Fedoraproject Gnome and 6 more

Products

Ubuntu Linux Fedora Gdk-pixbuf and 6 more

CVE-2015-4141

hostapd: WPS UPnP vulnerability with HTTP chunked transfer encoding

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Opensuse W1.fi

Products

Opensuse Hostapd Wpa Supplicant

CVE-2015-4022

php: integer overflow leading to heap overflow when reading FTP file listing

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 20.1% KEV · Not listed

Vendors

Apple Php Redhat

Products

Mac Os X Php Enterprise Linux and 7 more

CVE-2015-4001

kernel: ozwpan: integer signedness error leading to heap buffer overflow

Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet.

CVSS 3.1 · 7.5 High EPSS 7.1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2015-3622

libtasn1: heap overflow flaw in _asn1_extract_der_octet()

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVSS 3.0 · 5.9 Medium EPSS 32.9% KEV · Not listed

Vendors

Fedoraproject Gnu Opensuse and 1 more

Products

Fedora Libtasn1 Opensuse and 1 more

CVE-2015-3279

cups-filters: texttopdf integer overflow

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed

Vendors

Canonical Debian Linuxfoundation and 1 more

Products

Ubuntu Linux Debian Linux Cups-filters and 1 more

CVE-2015-3258

cups-filters: texttopdf heap-based buffer overflow

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.

CVSS 2.0 · 7.5 High EPSS 7.9% KEV · Not listed

Vendors

Canonical Debian Linuxfoundation and 1 more

Products

Ubuntu Linux Debian Linux Cups-filters and 1 more

CVE-2015-3210

pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)

Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.

CVSS 3.1 · 9.8 Critical EPSS 9.2% KEV · Not listed

Vendors

Pcre Redhat

Products

Pcre Pcre2 Rhel Software Collections

CVE-2014-0133

nginx: heap-based buffer overflow in SPDY implementation

Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request.

CVSS 2.0 · 7.5 High EPSS 9.5% KEV · Not listed

Vendors

F5 Opensuse

Products

Nginx Opensuse

CVE-2014-0172

elfutils: integer overflow, leading to a heap-based buffer overflow in libdw

Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed

Vendors

Elfutils Project Redhat

Products

Elfutils Enterprise Linux

CVE-2014-0226

httpd: mod_status heap-based buffer overflow

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

CVSS 2.0 · 6.8 Medium EPSS 85.8% KEV · Not listed

Vendors

Apache Debian Oracle and 1 more

Products

Http Server Debian Linux Enterprise Manager Ops Center and 6 more

CVE-2014-1543

firefox: Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API (MFSA 2014-54)

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Mozilla

Products

Firefox

CVE-2014-3461

Qemu: usb: fix up post load checks

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed

Vendors

Qemu Redhat

Products

Qemu Enterprise Linux Openstack

CVE-2014-5119

glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()

Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.

CVSS 2.0 · 7.5 High EPSS 17.0% KEV · Not listed

Vendors

Debian Gnu Redhat

Products

Debian Linux Glibc Enterprise Linux and 2 more