Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2014-9842

ImageMagick: memory leak in psd handling

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 6 more
CVE-2014-9841

ImageMagick: throwing of exceptions in psd handling

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 5 more
CVE-2017-17806

kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2017-17669

exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-17480

openjpeg: Stack-buffer overflow in the pgxtovolume function

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Uclouvain
Products
Ubuntu Linux Debian Linux Openjpeg
CVE-2017-17680

ImageMagick: Memory leak in ReadXPMImage function in coders/xpm.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-16995

kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.

CVSS 3.1 · 7.8 High EPSS 30.1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2017-17087

vim: Sets the group ownership of a .swp file to the editor's primary group

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Vim
Products
Ubuntu Linux Debian Linux Vim
CVE-2017-17681

ImageMagick: Infinite loop in ReadPSDChannelZip function in coders/psd.c

In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-16548

rsync: Heap-based buffer over-read in receive_xattr function

The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.

CVSS 3.1 · 9.8 Critical EPSS 5.8% KEV · Not listed
Vendors
Canonical Debian Samba
Products
Ubuntu Linux Debian Linux Rsync
CVE-2017-16546

ImageMagick: Invalid memory allocation in the ReadWPGImage function

The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-16611

libXfont: User can trigger arbitrary file read by X server causing a DoS

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian X
Products
Ubuntu Linux Debian Linux Libxfont
CVE-2017-16533

kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c

The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel