Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,194

Export CSV
CVE-2017-17788

gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17789

gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17787

gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17805

kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2017-17784

gimp: Heap-based buffer over-read in load_image function in plug-ins/common/file-gbr.c

In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17785

gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17786

gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17806

kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2017-17816

nasm: Use-after-free in pp_getline function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-5669

kernel: Shmat allows mmap null page protection bypass

The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2017-17087

vim: Sets the group ownership of a .swp file to the editor's primary group

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Vim
Products
Ubuntu Linux Debian Linux Vim
CVE-2017-17480

openjpeg: Stack-buffer overflow in the pgxtovolume function

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Uclouvain
Products
Ubuntu Linux Debian Linux Openjpeg
CVE-2017-17669

exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-16642

php: Out-of-bound read in timelib_meridian()

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.

CVSS 3.0 · 7.5 High EPSS 26.4% KEV · Not listed
Vendors
Canonical Debian Netapp and 2 more
Products
Ubuntu Linux Debian Linux Clustered Data Ontap and 3 more
CVE-2017-16612

libXcursor: file.c: heap-based buffer overflow when reading/creating images

libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.

CVSS 3.0 · 7.5 High EPSS 5.2% KEV · Not listed
Vendors
Canonical Debian X
Products
Ubuntu Linux Debian Linux Libxcursor
CVE-2017-16995

kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.

CVSS 3.1 · 7.8 High EPSS 30.1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel