Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2017-17819

nasm: Illegal address access in find_cc function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-2888

SDL: Integer overflow while creating a new RGB surface

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Libsdl
Products
Ubuntu Linux Debian Linux Simple Directmedia Layer
CVE-2014-9841

ImageMagick: throwing of exceptions in psd handling

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 5 more
CVE-2014-9842

ImageMagick: memory leak in psd handling

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 6 more
CVE-2017-17812

nasm: Heap-based buffer over-read in detoken function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17811

nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17813

nasm: use-after-free in pp_list_one_macro function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17806

kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2017-17815

nasm: Illegal address access in is_mmacro function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17810

nasm: Segfault via mishandled macro calls in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17814

nasm: use-after-free in do_directive function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17787

gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17788

gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17786

gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp