Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 92

Export CSV
CVE-2015-8922

libarchive: NULL pointer access in 7z parser

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Novell and 2 more
Products
Ubuntu Linux Libarchive Suse Linux Enterprise Desktop and 4 more
CVE-2015-8925

libarchive: Unclear invalid memory read in mtree parser

The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8926

libarchive: NULL pointer access in RAR parser

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8928

libarchive: Heap out of bounds read in mtree parser

The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8927

libarchive: Heap out of bounds read when reading password for malformed ZIP

The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2015-8934

libarchive: out of bounds heap read in RAR parser

The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2016-2571

squid: wrong error handling for malformed HTTP responses

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

CVSS 3.0 · 7.5 High EPSS 9.3% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2014-3609

squid: assertion failure in Range header processing (SQUID-2014:2)

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."

CVSS 2.0 · 5.0 Medium EPSS 56.2% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2014-3535

Kernel: netdevice.h: NULL pointer dereference over VxLAN

include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.

CVSS 2.0 · 7.8 High EPSS 4.2% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2014-3604

SSL: Hostname verification susceptible to MITM attack

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Not Yet Commons Ssl Project Redhat
Products
Not Yet Commons Ssl Jboss Enterprise Soa Platform
CVE-2016-2572

squid: wrong error handling for malformed HTTP responses

http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

CVSS 3.0 · 7.5 High EPSS 10.2% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2014-3618

procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."

CVSS 2.0 · 7.5 High EPSS 8.9% KEV · Not listed
Vendors
Canonical Procmail Redhat
Products
Ubuntu Linux Procmail Enterprise Linux
CVE-2014-6425

wireshark: CUPS dissector crash (wnpa-sec-2014-15)

The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a CUPS packet that lacks a trailing '\0' character.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2014-7828

freeipa: password not required when OTP in use

FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind.

CVSS 2.0 · 3.5 Low EPSS 2.1% KEV · Not listed
Vendors
Freeipa
Products
Freeipa
CVE-2012-1182

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

CVSS 2.0 · 10.0 Critical EPSS 74.4% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Rhel Els Rhel Eus and 2 more
CVE-2012-2136

kernel: net: insufficient data_len validation in sock_alloc_send_pskb()

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2012-2744

kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()

net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.

CVSS 2.0 · 7.8 High EPSS 4.5% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus