Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2014-9637

patch: local denial of service with a crafted patch

GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Fedoraproject Gnu and 1 more
Products
Ubuntu Linux Fedora Patch and 1 more
CVE-2017-16533

kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c

The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2017-14859

exiv2: Invalid memory address dereference in Exiv2::StringValueBase::read

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-14862

exiv2: Invalid memory address dereference in the Exiv2::DataValue::read

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-14633

libvorbis: Out-of-bounds array read in the function mapping0_forward()

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Xiph.org
Products
Ubuntu Linux Debian Linux Libvorbis
CVE-2017-14864

exiv2: Invalid memory address dereference in Exiv2::getULong

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-14625

ImageMagick: NULL pointer dereference in the sixel_output_create function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14626

ImageMagick: NULL pointer dereference in the sixel_decode function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14624

ImageMagick: NULL pointer dereference in the PostscriptDelegateMessage function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14632

libvorbis: Invalid freeing of uninitialized memory in the function vorbis_analysis_headerout()

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

CVSS 3.1 · 9.8 Critical EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Xiph.org
Products
Ubuntu Linux Debian Linux Libvorbis
CVE-2017-14495

dnsmasq: memory exhaustion vulnerability in the EDNS0 code

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

CVSS 3.0 · 7.5 High EPSS 85.4% KEV · Not listed
Vendors
Canonical Debian Novell and 2 more
Products
Ubuntu Linux Debian Linux Leap and 5 more