CVE-2017-14492

dnsmasq: heap overflow in the IPv6 router advertisement code

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

CVSS 3.0 · 9.8 Critical EPSS 94.5% KEV · Not listed

Vendors

Canonical Debian Novell and 2 more

Products

Ubuntu Linux Debian Linux Leap and 6 more

CVE-2016-9811

gstreamer: Out of bounds heap read in windows_icon_typefind

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.

CVSS 3.1 · 4.7 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Fedoraproject Gstreamer and 1 more

Products

Debian Linux Fedora Gstreamer and 7 more

CVE-2017-14493

dnsmasq: stack buffer overflow in the DHCPv6 code

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

CVSS 3.0 · 9.8 Critical EPSS 85.2% KEV · Not listed

Vendors

Canonical Debian Opensuse and 2 more

Products

Ubuntu Linux Debian Linux Leap and 6 more

CVE-2017-15041

golang: arbitrary code execution during "go get" or "go get -d"

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, "go get" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git/hooks/, they will execute on the system running "go get."

CVSS 3.1 · 9.8 Critical EPSS 8.9% KEV · Not listed

Vendors

Debian Golang Redhat

Products

Debian Linux Go Developer Tools and 6 more

CVE-2017-3112

flash-plugin: multiple code execution issues fixed in APSB17-33

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Macos Chrome Os and 8 more

CVE-2017-5029

chromium-browser: integer overflow in libxslt

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed

Vendors

Apple Debian Google and 4 more

Products

Macos Debian Linux Android and 8 more

CVE-2017-5103

chromium-browser: uninitialized use in skia

Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed

Vendors

Apple Debian Google and 3 more

Products

Macos Debian Linux Chrome and 6 more

CVE-2018-1000156

patch: Malicious patch files cause ed to execute arbitrary commands

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

CVSS 3.0 · 7.8 High EPSS 5.3% KEV · Not listed

Vendors

Canonical Debian Gnu and 1 more

Products

Ubuntu Linux Debian Linux Patch and 11 more

CVE-2015-3195

OpenSSL: X509_ATTRIBUTE memory leak

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.

CVSS 3.1 · 5.3 Medium EPSS 38.7% KEV · Not listed

Vendors

Apple Canonical Debian and 6 more

Products

Mac Os X Ubuntu Linux Debian Linux and 25 more

CVE-2015-3152

mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

CVSS 3.1 · 5.9 Medium EPSS 7.1% KEV · Not listed

Vendors

Debian Fedoraproject Mariadb and 3 more

Products

Debian Linux Fedora Mariadb and 11 more

CVE-2015-3044

flash-plugin: security bypass leading to information disclosure (APSB15-06)

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 9.4% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 10 more

CVE-2015-3042

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 36.8% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-3041

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-3040

flash-plugin: information leaks leading to ASLR bypass (APSB15-06)

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.

CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-3039

flash-plugin: multiple code execution issues fixed in APSB15-06

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-3038

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 7.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-2787

php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.

CVSS 2.0 · 7.5 High EPSS 11.8% KEV · Not listed

Vendors

Apple Opensuse Php and 1 more

Products

Mac Os X Opensuse Php and 8 more

CVE-2015-2783

php: buffer over-read in Phar metadata parsing

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

CVSS 2.0 · 5.8 Medium EPSS 9.0% KEV · Not listed

Vendors

Apple Php Redhat

Products

Mac Os X Php Enterprise Linux and 7 more

CVE-2015-2648

mysql: unspecified vulnerability related to Server:DML (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0 · 4.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 11 more

CVE-2015-2643

mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 11 more