Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2014-4656

Kernel: ALSA: control: integer overflow in id.index & id.numid

Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat and 1 more
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 8 more
CVE-2014-4652

Kernel: ALSA: control: protect user controls against races & memory disclosure

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat and 1 more
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 5 more
CVE-2014-4344

krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens

The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.

CVSS 2.0 · 7.8 High EPSS 6.6% KEV · Not listed
Vendors
Debian Mit Redhat
Products
Debian Linux Kerberos 5 Enterprise Linux and 4 more
CVE-2014-4343

krb5: double-free flaw in SPNEGO initiators

Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.

CVSS 2.0 · 7.6 High EPSS 6.4% KEV · Not listed
Vendors
Debian Mit Redhat
Products
Debian Linux Kerberos 5 Enterprise Linux and 4 more
CVE-2014-4342

krb5: denial of service flaws when handling RFC 1964 tokens

MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.

CVSS 2.0 · 5.0 Medium EPSS 6.5% KEV · Not listed
Vendors
Debian Mit Redhat
Products
Debian Linux Kerberos Kerberos 5 and 5 more
CVE-2016-2106

openssl: EVP_EncryptUpdate overflow

Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

CVSS 3.0 · 7.5 High EPSS 27.3% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Enterprise Linux Desktop and 10 more
CVE-2014-4341

krb5: denial of service flaws when handling padding length longer than the plaintext

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

CVSS 2.0 · 5.0 Medium EPSS 7.1% KEV · Not listed
Vendors
Debian Fedoraproject Mit and 1 more
Products
Debian Linux Fedora Kerberos 5 and 8 more
CVE-2014-3693

libreoffice: Use-After-Free in socket manager of Impress Remote

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Libreoffice Opensuse and 1 more
Products
Ubuntu Linux Libreoffice Opensuse and 4 more
CVE-2014-3640

qemu: slirp: NULL pointer deref in sosendto()

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu and 1 more
Products
Ubuntu Linux Debian Linux Qemu and 5 more
CVE-2014-3581

httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Enterprise Manager Ops Center and 9 more
CVE-2014-3580

subversion: NULL pointer dereference flaw in mod_dav_svn when handling REPORT requests

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

CVSS 2.0 · 5.0 Medium EPSS 11.0% KEV · Not listed
Vendors
Apache Apple Debian and 1 more
Products
Subversion Xcode Debian Linux and 6 more
CVE-2014-3575

openoffice: Arbitrary file disclosure via crafted OLE objects

The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.

CVSS 2.0 · 4.3 Medium EPSS 11.3% KEV · Not listed
Vendors
Apache Libreoffice Redhat
Products
Openoffice Libreoffice Enterprise Linux and 3 more
CVE-2016-1840

libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2014-3528

subversion: credentials leak via MD5 collision

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.

CVSS 2.0 · 4.0 Medium EPSS 7.4% KEV · Not listed
Vendors
Apache Apple Canonical and 2 more
Products
Subversion Xcode Ubuntu Linux and 7 more
CVE-2014-3469

libtasn1: asn1_read_value_type() NULL pointer dereference

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Debian Gnu Redhat and 1 more
Products
Debian Linux Gnutls Libtasn1 and 12 more
CVE-2014-3468

libtasn1: asn1_get_bit_der() can return negative bit length

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian F5 Gnu and 2 more
Products
Debian Linux Arx Arx Firmware and 14 more
CVE-2014-3467

libtasn1: multiple boundary check issues

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

CVSS 2.0 · 5.0 Medium EPSS 6.8% KEV · Not listed
Vendors
Debian F5 Gnu and 2 more
Products
Debian Linux Arx Arx Firmware and 14 more
CVE-2014-3199

chromium: multiple security fixes in Chrome 38.0.2125.101

The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more